Handing Wallet Vulberability

FYI

https://nvd.nist.gov/vuln/detail/CVE-2024-23660

1 Like

https://x.com/CoinDesk/status/1758240307877904787?s=20

1 Like

Private keys of the Trust Wallet are made from entropy seeded with easy-to-guess time values, which is easy to brute force. Wondering if such vulnerable entropy is used for other wallets.

Besides this specific vulnerability, it also highlights the challenges of handling the incident response with self-custodian wallets…

2 Likes

@JBringer
It should be a part of our discussion at the security session at Block 10.

agreed. There is also the latest initiative around whitehats emergency rescue process with pre-approval from a protocol community, from SEAL.

1 Like