ChainCatcher news, according to CryptoPotato, the crypto cybersecurity company Unciphered has discovered a decade-old vulnerability in crypto wallets that affects browser-based wallets generated between 2011 and 2015. This vulnerability could allow malicious actors to steal up to $2.1 billion from various network wallets, including Bitcoin (BTC), Dogecoin (DOGE), Litecoin (LTC), and Zcash (ZEC).The company stated that wallets generated before March 2012 have $100 million worth of assets that are easily hackable by home computer users. Additionally, wallets created between that time and 2015 have at least $500 million worth of assets at risk. Unciphered has begun quietly warning affected users that their assets are at risk.

ChainCatcher news, former Ripple CTO Stefan Thomas has an IronKey hard drive containing 7,002 BTC (currently worth about $244 million), but he has forgotten the password to access the drive. If a person enters the wrong password ten times, the data will be wiped. He has made eight attempts so far, leaving only two chances to enter the password.Cryptocurrency recovery company Unciphered published an open letter to Stefan Thomas, stating that they have developed a method to crack the hardware and access Bitcoin private keys that have been securely stored for years, being able to access data similar to that on IronKey after "200 trillion attempts."

ChainCatcher news, cybersecurity company Unciphered claims to have the ability to hack into the Trezor T hardware encryption wallet. In a YouTube demonstration, Unciphered showcased the process of extracting mnemonic seed private keys from the wallet by exploiting vulnerabilities, stating that this attack is only feasible when the attacker has physical access to the hardware wallet. Unciphered believes that Trezor T needs to recall all of their products to fix this vulnerability.Previous report indicated that Unciphered claimed to have cracked Trezor and other HW wallets in early February this year. The company had previously exploited vulnerabilities to hack OneKey, which quickly patched the vulnerability. (The Block)

ChainCatcher news, security company Unciphered responded to the tweet "OneKey's crypto wallet has been successfully hacked by a security company" by stating: "OneKey has patched the vulnerability, but we still hacked Trezor and other HW wallets."As of the time of publication, the hardware wallet Trezor has not yet responded to this information. (Source link)

ChainCatcher news, according to The Block, security company Unciphered announced that it has successfully hacked the hardware wallet OneKey. It is reported that Unciphered demonstrated a so-called "man-in-the-middle" wallet hacking attack in a YouTube video, which can extract recovery keys from the OneKey Mini hardware wallet by exploiting vulnerabilities. OneKey has promptly fixed the vulnerability after contacting Unciphered.Unciphered stated that the FPGA used in the hack is a high-speed processor that allows it to iterate through different algorithms, bypassing the wallet's security measures and extracting the recovery phrases. OneKey indicated that it has fixed the vulnerability immediately and that no users were harmed in this incident. The attack method demonstrated by Unciphered cannot be executed remotely and requires the user's encrypted hardware wallet and a specialized FPGA device. OneKey has already paid a bug bounty to Unciphered for the vulnerability disclosure. (Source link)