To kickstart the weekend, we’ve curated a handful of short but compelling stories from across the crypto sphere. First up, we’ll revisit the fallout from Wallet Fail’s demonstration of hardware wallet cracking. We’ll then move on to a Patreon alternative that’s powered by cryptocurrency and a viral tweetstorm about everything that’s allegedly wrong with Ethereum.
Also read: Blockchain Company Buys Spanish Soccer Club, Cementing Crypto-Sports Connection
More Hardware Wallet Manufacturers Respond to Hacking Claims
As we reported yesterday, a team known as Wallet Fail have captured attention after demonstrating how to crack several cryptocurrency hardware wallets. Ledger and Trezor, the manufacturers whose devices were exploited at the 35C3 conference, were swift to issue rebuttals and reassurances, emphasizing the impracticality of an attacker implementing one of Wallet Fail’s methods in the wild. Since we reported on the story, a number of other hardware wallet companies have also responded to the presentation.
“Keepkey did not have prior knowledge of this vulnerability through our responsible disclosure program,” tweeted the wallet manufacturer, but explained that “The Keepkey dev team is working on a fix.” They then stressed that “all users should make sure their physical device is in a safe place, as the attacker must have physical access to be successful.” Coldcard, meanwhile, pointed out that its own device wasn’t referenced in Wallet Fail’s presentation, and used the opportunity to boast that, unlike the competition, its own wallet doesn’t fail. The Wallet Fail team, for its part, has denied allegations that it didn’t disclose the vulnerabilities it found to manufacturers in advance of its presentation:
Just to clarify, we disclosed this “non-vulnerability” to @LedgerHQ 161 days ago. https://t.co/5TqTPeGVfU
