Alleged Coinomi exploit shows how easy it is to have Bitcoin stolen

Re:Alleged Coinomi exploit shows how easy it is to have Bitc... by wcoenen on Wednesday February 27, 2019 @10:44AM (#19263901)

If I were a security consultant, I would be a bit more hesitant about telling the world that I casually entered a seed phrase worth $60K into an online device, never mind which software it was. The report mentions that the seed phrase originally came from his exodus wallet (desktop software), which is also a wallet that is not suitable for storing such large amounts.

For those amounts, use a hardware wallet, or software that supports generating the transactions offline so that the device with the key never has to go online.

[ Parent | on HN ]

Re:Alleged Coinomi exploit shows how easy it is to have Bitc... by hombre_fatal on Wednesday February 27, 2019 @01:06PM (#19265423)

I've been the victim of social-engineering attacks for less.

If you know someone holds cryptocurrency, doesn't hurt to attack their AWS account in case they are running bitcoind on EC2.

[ Parent | on HN ]

Re:Alleged Coinomi exploit shows how easy it is to have Bitc... by updateYourMind on Wednesday February 27, 2019 @11:30AM (#19264244)

Can someone who finds your hardware wallet use it to sign tx? I'm guessing there is a PIN.

[ Parent | on HN ]

Re:Alleged Coinomi exploit shows how easy it is to have Bitc... by hanniabu on Wednesday February 27, 2019 @11:46AM (#19264423)

Yes, there is a pin and usually a limit to attempts. Ledger has a 3 attempt limit and then it'll reset the device. You can retrieve your funds by entering a 23 word mnemonic phrase that was generated when first setting up the ledger (and keys).

[ Parent | on HN ]

Re:Alleged Coinomi exploit shows how easy it is to have Bitc... by Zenbit_UX on Wednesday February 27, 2019 @01:59PM (#19265906)

24 word

[ Parent | on HN ]