Ledger Blog company blog

Funds of every Trust Wallet browser extension could have been stolen

by Charles Guillemet blog.ledger.com published 2023-04-25

Seed generation of Trust Wallet was flawed, the total entropy was only 32 bits. We have created a file containing all possible seeds. Fortunately, the Ledger Donjon discovered the vulnerability very quickly and likely avoided one of the biggest hack in the crypto ecosystem.

Points

158

HN comments

177

Submissions

1

Cited by

0 commenters

Security & PrivacyCrypto & Blockchain2023

Related posts from the same era

Reverse engineering Ticketmaster's rotating barcodes

conduition20242,305 points714 comments details

Someone is pretending to be me

Connor Tumbleson20222,244 points383 commentscited by 3 details

Bypassing airport security via SQL injection

Ian Carroll20242,004 points440 comments details

Anyone can access deleted and private repository data on GitHub

Truffle Security Blog20241,983 points374 commentscited by 8 details

In 2024, please switch to Firefox

Roy Tanck20231,776 points810 comments details

Thanks FedEx, this is why we keep getting phished

Troy Hunt20241,723 points646 commentscited by 4 details