2 Bitcoin wallets attacked: a look back at what happened for Electrum and Keystone

Home » Crypto news » Bitcoin (BTC) news » 2 Bitcoin wallets attacked: a look back at what happened for Electrum and Keystone

https://cryptoast.fr/2-portefeuilles-bitcoin-attacks-return-electrum-keystone/

The Electrum wallet appears to be one of the most reliable and recognized crypto wallets in the ecosystem, since its creation in November 2011, with a notable specificity: it only supports Bitcoin and its Lightning Network dedicated to payments.

A status which does not prevent it from facing targeted attacks, the best known of which occurred between 2018 and 2019 using phishing procedures targeting its users. And, obviously, a new “critical security issue” has just been detected in the last few days, forcing its developers to release a new version of their software.

👉 Discover our comparison of the 10 best sites to buy Bitcoin

New version: Electrum 4.8.3. This release fixes a critical security issue; so we urge all users to update. A description of the vulnerability will be released later today.

At issue: malicious servers exploited a flaw which made it possible to divert a pending transaction and validate it when its initiator decided to increase the fees to speed up the procedure. He thereby signed the false transaction, which ultimately sent the funds to the hacker's wallet.

According to available information, two reports made it possible to detect this flaw, including a user who actually lost his funds. To ensure you don't fall into this trap, it is imperative to install the new updated version and not increase the fees of a transaction in the meantime.

To secure your bitcoins, you can opt for a hardware wallet like Tangem, with the code CRYPTOAST.

For its part, the hardware wallet company Keystone has just faced a data leak linked to its website. An operation which apparently allowed a malicious actor to access the delivery information of its customers, including their names, contact details, delivery addresses and order details. Payment information (card and bank details) has not been disclosed.

A situation which obviously exposes its customers to targeted phishing-type scams, as Keystone managers do not fail to point out in their publication on the X network.

🗞️ Ledger trapped: a scammer gets 60 BTC stolen in turn

Scammers may pose as Keystone by phone, text, email or mail, offering refunds, replacement devices or "fixes" to your order or address. None of this comes from us. NEVER give out your recovery phrase or private keys, or EVER enter your recovery phrase into a device you did not order.

The Keystone company indicates that it has obviously corrected the vulnerability of its website, but also opened an investigation. She should send an email to all affected customers.

Machine-translated from French