Trust Wallet Created November 14 To 23, 2022 Can Be Cracked

Key Points:

• The SlowMist founder believes that there is a risk of private keys being cracked for wallets that are extended using the Trust Wallet browser and created between November 14 and 23 last year.
• The underlying reason was that the MT19937 pseudo-random number generator used by the Trust Wallet browser extension at that time did not provide enough randomness.
• Trust Wallet disclosed this risk, but fortunately, the loss was slight.

SlowMist’s founder tweeted that if you use the Trust Wallet browser extension and create a wallet between November 14 and 23, 2022, that wallet is at risk.

The underlying reason was that the MT19937 pseudo-random number generator used by the Trust Wallet browser extension at that time did not provide enough randomness so that the private key could be cracked. Trust Wallet has disclosed this risk, but fortunately, the loss is slight.

This Wallet claims that after the incident, it quickly patched the vulnerability, and all addresses created after these days are safe. However, Trust Wallet still discovered two attacks that cost about $170,000.

Over the past months, the wallet platform has actively pushed 1-to-1 notifications to affected addresses, resulting in significant transfers to secure addresses with strong momentum up until recently.

In response, Trust Wallet will cover eligible losses from the hack due to the vulnerability and has created a compensation process for affected users. The total current remaining balance of the affected addresses is approximately $88,000.

“Despite our best efforts to minimize loss, we proactively identified two likely exploits with a total loss of $170K. To do right to users, we created a reimbursement process for affected users to make them whole.”

The latest versions of Trust Wallet mobile apps and Browser Extensions remain safe and secure to use. It urges affected users to transfer funds as soon as possible. Avoid using addresses provided by others.

If you see a message from the wallet platform, you should create a new wallet address, immediately transfer your assets, and stop using vulnerable addresses. Do not use wallet addresses you did not make to avoid being taken advantage of by scammers.

DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.

Join us to keep track of news: https://linktr.ee/coincu

Foxy

Coincu News