Jaxx Wallet ‘Vulnerability’: Users Report $400k Funds Thefts

Want create site? Find Free WordPress Themes and plugins.

Reports are surfacing of a ‘vulnerability’ in Jaxx wallet leading to at least $400,000 customer funds being stolen.

A report on the insufficient wallet backup phrase storage methods this weekend has now updated to include reports that hackers are already exploiting the problem to steal cryptocurrency from users.

A researcher from Vx Labs highlighted the problem Friday, saying they had “successfully” tested the vulnerability and seen that it worked.

“Even when your Jaxx has a security PIN configured, anyone with 20 seconds of (network) access to your PC can extract your 12 word backup phrase and copy it down,” the report reveals. “Jaxx does not have to be running for this to happen.”

An update subsequently linked to users confirming they had lost Ethereum (ETH), Ethereum Classic (ETH) and Zcash from Jaxx. These appear to total at least $400,000.

Jaxx Wallet ‘Vulnerability’: Users Report $400k Funds Thefts

Jaxx Wallet ‘Vulnerability’: Users Report $400k Funds Thefts

Nonetheless, Nilang Vyas, CTO of Jaxx & Decentral, said on Reddit there were no plans to alter the wallet’s security setup.

“We are very comfortable with this security model for hotwallets,” he wrote.

“The fact is there will always be tradeoffs between user experience, portability and security and we believe we’ve struck a great balance.”

Vx meanwhile “strongly recommended” users “avoid” Jaxx in future.

“In the future users will be able to secure their Jaxx wallet with both Trezor, Ledger and our own hardware wallets,” Vyas continued. “Until that time, please use Jaxx as a hot wallet for small amounts, and use hardware wallets for larger amounts.”

Let's block ads! (Why?)

Powered by WPeMatico

Did you find apk for android? You can find new Free Android Games and apps.



0
Connecting
Please wait...
Send a message

Sorry, we aren't online at the moment. Leave a message.

Your name
* Email
* Describe your issue
Login now

Need more help? Save time by starting your support request online.

Your name
* Email
* Describe your issue
We're online!
Feedback

Help us help you better! Feel free to leave us any additional feedback.

How do you rate our support?