Some 1,800 Bitcoins have been stolen from user wallets in a cold wallet hack, the equivalent of about $140 million. Incrypted reports that a vulnerability in key generation enabled the breach and that even the most security-conscious users were not immune.<\/p>\n
The latest from Incrypted puts the figure at around 1,800 Bitcoins taken from cold storage through an attack on nearly 9,000 addresses. By exploiting a flaw in key generation, hackers carried out one of the most damaging breaches in recent crypto history.<\/p>\n
It came to light when owners of Ledger wallets began to report missing digital assets; the volume of such reports left no doubt as to how extensive the compromise was and that it was not a matter of faulty devices or user error.<\/p>\n
There is also a social engineering element. Presenters at Incrypted point out that the hackers did not rely solely on technical exploits but also targeted users to obtain their private keys. Databases with customer information have also been known to leak via email or courier, increasing the risk. One would think those with good digital habits and offline paper keys would be safe, yet they too were targeted, a testament to the tenacity and skill of the attackers.<\/p>\n
Hardware wallet security is once again under scrutiny. A CTO for Ledger has acknowledged the possibility of physical spy implants on certain devices, pointing to wiring that should not be there. To spot them, one has to open up the device and inspect it, which is not something most people are inclined to do, says Incrypted.<\/p>\n
In the wake of this, the community is having to re-examine what it considers secure. An iPhone 13 can serve as a cold wallet provided it is kept offline and receives updates, but Incrypted experts are quick to add it must be used for crypto storage only to keep the attack surface small.<\/p>\n
It is a reminder of the kinds of threats crypto holders face. Best practices are no guarantee when there are weaknesses in the supply chain or in key generation, not to mention social engineering. The hosts of Incrypted see it as a call for manufacturers and users alike to be more vigilant and raise their standards in order to safeguard their holdings.<\/p>\n
Every call by Incrypted and how it played out \u2014 in the BuyCrypt bloggers tracker<\/a>.<\/em><\/p>\n Source \u2014 Incrypted: https:\/\/www.youtube.com\/watch?v=C82NJUrv9uk<\/a><\/em><\/p>\n <\/p>\n Understand the risks of crypto security by practicing risk-free trading on our simulator to sharpen your skills without financial exposure. practice risk-free trading<\/a>.<\/p>\n <\/p>\n