Handing Wallet Vulberability

Working Group(s) IAM, Key Management & Privacy (IKP)
1

FYI

https://nvd.nist.gov/vuln/detail/CVE-2024-23660

1 Like
2

https://x.com/CoinDesk/status/1758240307877904787?s=20

1 Like
3

Private keys of the Trust Wallet are made from entropy seeded with easy-to-guess time values, which is easy to brute force. Wondering if such vulnerable entropy is used for other wallets.

4

Besides this specific vulnerability, it also highlights the challenges of handling the incident response with self-custodian wallets…

2 Likes
5

@JBringer
It should be a part of our discussion at the security session at Block 10.

6

agreed. There is also the latest initiative around whitehats emergency rescue process with pre-approval from a protocol community, from SEAL.

1 Like