TokenPost topic
Wallet Security
122 TokenPost stories are tagged Wallet Security. The newest appear first.
Latest Wallet Security stories
- Binance Audit Between Prediction Markets Module and Main-Site Wallet Continues
Co-CEO 何一 said the review remains in progress and will be pushed back somewhat in priority.
· Technology
- OnKey Founder Warns Users Against Storing Seed Phrases on Older iPhones
Yishi said the vulnerabilities can let someone with physical access run code before iOS starts, and cannot be fixed with an iOS update.
· Technology
- Trezor Urges CryptoBilis Wallet Buyers to Move Funds After Implant Report
The warning covers Trezor devices bought through the Indonesian reseller since March 2026. Trezor has not received the reported Safe 5 for lab testing.
· Technology
- Kintsu Restores Domain Routing but Keeps Wallet Warning in Place
Some networks may still direct users to a malicious site for up to an hour as DNS caches clear.
· Technology
- Kintsu Confirms DNS Hijack, Urges Users to Revoke Wallet Approvals
Users who connected a wallet or signed a transaction after 8 p.m. ET Friday should revoke related approvals and move their assets.
· Technology
- StepDrainer Wallet Attack Expands to 10 More Crypto Projects
A Blockaid alert relayed by Pons founder Ozzy lists 10 projects and urges users to avoid affected sites and wallet connections.
· Technology
- Flap Warns Users to Avoid Website After Abnormal Domain Redirect
The founder said the warning applies to recent visitors who connected a wallet or signed an authorization on the affected site. Earlier normal connections are unaffected.
· Technology
- Blockaid Warns of StepDrainer Attack on Three Crypto Websites
Malicious scripts on Kintsu, Flap and Stonkbrokers may redirect users who select “Connect Wallet” to asset-transfer pages.
· Technology
- Ethereum Draft Would Let EOAs Permanently Disable EIP-7702
The irreversible lock would block later delegation authorizations while preserving ordinary transactions. A compromised private key could still be used to move funds.
· Technology
- EIP-7702 Wallet Delegations Put User Authorizations at the Center
The Ethereum feature lets ordinary wallets run smart-contract code and bundle actions. Attackers still need a private key or signed authorization to move assets through a delegation.
· Technology
- Trezor Urges New Recovery Phrases After Safe 5 Tampering Report
The guidance covers all Trezor models bought from CryptoBilis since March 2026. Buyers can request a free replacement or a voucher equal to the purchase value.
· Technology
- Binance Says Hacked Employee Computer Started a Broader Attack
The company said it found no evidence of wallet private-key exposure and has frozen about $3 billion in affected assets.
· Technology
- Binance Outflows Extend to Three Accounts as 823 Million USDC Moves
Hot Wallet 34 saw the 823 million USDC outflow. Binance 14 was swept again 40 minutes after its first outflow.
· Technology
- Myriad Voids 10 Prediction Markets After Admin Wallet Compromise
The operator promised automatic refunds to holders on both sides, calculated at pre-attack prices minus any winnings already claimed.
· Technology
- Predict.fun Wallet Transfers Began Five Days Before Disclosure
Transaction records show 397,708 USDT moved across 29 accounts in two waves, followed by a separate 4,900-USDT transfer after the platform's statement.
· Technology
- Solana Co-Founder Toly Urges Dice-Based Wallet Seed Phrase Generation
He warned that some hardware wallets may use weak randomness or secretly send back a previously loaded mnemonic.
· Technology
- BloomTrading Pledges Full Reimbursement to Nine Users After Wallet Losses
A suspected drainer received about 9,408 Solana (SOL) from roughly 49 wallets, worth roughly $954,000. BloomTrading says its investigation is ongoing.
· Technology
- CoinDCX Links Failed Deposit Sweep to 15.99 Million USDT Loss
The exchange tied the failure to wallet infrastructure involved in a 2025 security incident and said customer balances and active trading were unaffected.
· Technology
- Polkadot Cut Nominator Unbonding From 28 Days to Two Eras in July
Referendum 1910 took effect July 6. Requests already underway stayed on the 28-day schedule.
· Technology
- Electrum Users Urged to Update After Fee-Bump Bitcoin Theft
The flaw affected versions earlier than 4.8.3. Electrum received two user reports, including one involving lost funds.
· Technology
- Electrum Warns of Exploited Wallet Flaw in Versions Before 4.8.3
Electrum confirmed two incident reports tied to the flaw, including one case in which a user lost funds.
· Technology
- Electrum Fixes Bitcoin (BTC) Wallet Flaw Exploited by Malicious Servers
The fake transaction carried no fee until a user manually raised it and signed, sending a payment to the attacker.
· Technology
- Electrum Releases Version 4.8.3 to Fix Serious Security Issue
The project urged all users to upgrade and plans to publish vulnerability details later Saturday. It also called a possible Windows Defender warning for ZXing.dll a false positive.
· Technology
- Electrum Urges Users to Install 4.8.3 After Critical Security Fix
The release addresses a critical issue in Electrum’s Bitcoin wallet. The project also said a Windows Defender alert involving ZXing.dll is a false positive.
· Technology
- Ethereum Wallet Keyed to 6969 Drew Three Pending Transactions
A transaction signed with the same key moved about $1 in Ether out 12 seconds after the deposit, with most of the funds used for network fees.
· Technology
- 16 Fake Rabby and OKX Wallet Extensions Targeted Firefox Users
Mozilla had unpublished the add-ons by Oct. 5. One OKX variant’s normal packaged flow failed because of defects in its manifest and message routing.
· Technology
- Binance Wallet Developer Warns Agent Developer Mode Can Enable Unverified Contract Signing
Some token-launch projects targeting Binance Agent wallets require users to enable developer mode.
· Technology
- CZ Says No Crypto Wallet Is Completely Secure, Urges Users to Manage Risk
The Binance founder said software and technology can have flaws, and that taking action or doing nothing both involve risk.
· Technology
- CoinDCX-Linked Wallets Consolidated at One Address, Then Moved Funds
TQKJQ had regularly sent funds to a CoinDCX hot wallet before it and related wallets were consolidated. The consolidated wallet then distributed funds, swapped assets and used over-the-counter services.
· Technology
- Sanctum Plans Oct. 22 Beta for Its Largest App Security Update
The project says user requests for stronger wallet safeguards prompted the work. Solana amplified the announcement with a repost on X.
· Technology
- Polkadot Urges Fearless Wallet Users to Move Funds Under New Keys
Chrome’s listing showed 6,000 users for an affected Fearless Wallet extension version.
· Technology
- Fearless Wallet Extension May Expose Keys as Users Report 17,286 DOT Lost
Eight users reported unauthorized transactions that may be linked to the issue. The affected releases are 3.0.1, 3.0.3, 3.0.4 and 3.0.5.
· Technology
- Polkadot Community Foundation Warns Fearless Wallet Users of Exposed Keys
Eight users have reported unauthorized transfers totaling 17,286 DOT. Affected users are urged to create new keys and move their assets.
· Technology
- NGRAVE Traces Stolen Bitcoin to 12 Addresses After Wallet Phishing
Stolen XRP moved through 54 transfers as NGRAVE continued to assess losses from the Oct. 17 attack.
· Technology
- Qubic Opens Recovery Claims After Seed Flaw Drains 1,404 Wallets
The blockchain has resumed processing, and affected wallet owners can submit claims through May 1, 2027.
· Technology
- NGRAVE Finds Attackers Copied LIQUID Notification List in Phishing Attack
The copied data included device and usage details. Other customer records were accessible, but NGRAVE is still checking whether they were taken.
· Technology
- NGRAVE Traces $2.56 Million in Losses From Fake LIQUID Alerts
The company's minimum tally covers roughly 70 wallet addresses on four networks, a narrower scope than an earlier on-chain count.
· Technology
- Qubic Restarts Blockchain and Opens Claims After $1.4 Million Hack
The wallet breach affected 1,404 accounts. Holders have until May 1, 2027, to submit recovery claims.
· Technology
- GTA 6 Early-Access Scams Seek Crypto Payments and Wallet Access
One page advertised a purported early copy for $1,000. Another used a wallet prompt that could seek far more than its listed price.
· Technology
- NGRAVE Phishing Attack Linked to Estimated $2.65 Million in Wallet Losses
About $2.16 million of the traced funds went into XMR1 purchases on Hyperliquid. The estimate does not establish that every affected wallet belonged to an NGRAVE user.
· Technology