XSS Attack Embedded in an ERC20 Token Contract Steals Thousands

Re:XSS Attack Embedded in an ERC20 Token Contract Steals Tho... by foota on Thursday September 28, 2017 @09:32PM (#15362117)

Aw, so there's some local client you run that you use to do the cryptographic bits, and the web client is just used to display results and let you navigate things?

[ Parent | on HN ]

Re:XSS Attack Embedded in an ERC20 Token Contract Steals Tho... by AgentME on Saturday September 30, 2017 @01:23AM (#15371389)

Optionally yes, but EtherDelta specifically does let you instead use it in a normal browser if you give it an Ethereum private key. The hack only affected people who used it that way.

[ Parent | on HN ]