Crypto wallet flaw can steal billions from early adopters, startup claims
Cybersecurity startup Unciphered has unveiled a deep security flaw in crypto wallet s that it stumbled upon, that it says has the potential to steal at least $1 billion from traders and up to $2.1 billion . On Tuesday, Unciphered published information on what it calls Randstorm: a vulnerability in web browser-generated self-custody wallets made between 2011 and 2015. Wallets generated by BitcoinJS and derivative projects can be affected due to the popular JavaScript library borrowing vulnerable open-source software from a Stanford student over a decade ago. BitcoinJS was used by many projects in the early 2010s — some are still active, like BitAddress and Bitco. Several blockchains can also be affected, including Dogecoin, Litecoin, and Zcash, Unnciphered said. Unciphered has apparently alerted millions of affected users to the crypto wallet flaw. It urges them to immediately transfer assets to a wallet made after 2016. Client selfies and data stolen from bankrupt Bit...