Fun

News Feed - 2023-08-10 02:08:00

Tom Blackstone6 hours agoOnly 6 out of 45 crypto wallet brands have undergone penetration testing: ReportCybersecurity certification platform CER said the vast majority of wallets do not hire outside experts to perform penetration tests.3213 Total views86 Total sharesListen to article 0:00NewsJoin us on social networksA July report from cybersecurity certification platform CER found that only six of 45 cryptocurrency wallet brands, or 13.3%, have undergone penetration testing to find security vulnerabilities. Of these, only half have performed tests on the latest versions of their products.


The three brands that have done up-to-date penetration tests are MetaMask, ZenGo and Trust Wallet, according to the report. Rabby and Bifrost performed penetration testing on older versions of their software, and Ledger Live did it on an unknown version (listed as “N/A” in the report). All other brands listed did not provide any evidence of having done these tests.


The report also provided an overall ranking of the security of each wallet, listing MetaMask, ZenGo, Rabby, Trust Wallet and Coinbase Wallet as being the most secure wallets overall.CER rankings for wallet security. Source: CER


“Penetration testing” is a method of finding security vulnerabilities in computer systems or software. A security researcher attempts to hack into the device or software and use it for purposes it wasn’t intended for. In most cases, a penetration tester is given little to no information about how the product works. This process is used to simulate real-world attempts at hacking to uncover vulnerabilities before the product is released.


CER found that 39 out of 45 wallet brands didn’t perform any penetration testing at all, not even on older versions of the software. CER speculated that the reason may be that these tests are expensive, especially if the company makes frequent upgrades to their products, stating, “We attribute it to the amount of updates an average app has, where each new update can disqualify the pentest made earlier.”


CER found that the most popular wallet brands were more likely to perform security audits, including penetration tests, as they often had the funds to do so:“Essentially, popular wallets tend to adopt more robust security measures to protect their increasing user base. This seems logical — a higher user base often corresponds to more significant funds to secure, more visibility, and consequently, more potential threats. It can also result in a positive feedback loop, with more secure wallets attracting new users in higher numbers than the less secure ones.”


CER’s ranking of wallets was based on a methodology that included factors like bug bounties, past incidents, and security features such as restore methods and password requirements.


Although most wallet brands don’t perform penetration testing, CER stated that many of them do rely on bug bounties to find vulnerabilities, which is often an effective means of preventing hacks. The firm rated 47 out of 159 individual wallets as “secure” overall, meaning that they had a security score of above 60. These 159 wallets included some that were from the same brands. For example, MetaMask for Edge browser was considered a separate wallet from MetaMask for Android.


Related:Bug bounties can help secure blockchain networks, but have mixed results


Wallet security has become an urgent issue in 2023, as over $100 million was lost in the Atomic Wallet hack on June 3. The Atomic team has speculated that the breach may have been caused by a virus or injection of malware in the company’s infrastructure, but the exact vulnerability that allowed the attack is still unknown. Web wallet MyAlgo also suffered a security breach in late February, resulting in an estimated loss to users of over $9 million.# Blockchain# Wallet# Adoption# Hardware Wallet# Mobile Wallet# Cybersecurity# Hot wallet# HacksAdd reactionAdd reactionRelated NewsHow to track and report crypto transactions for tax purposesEnsuring integrity of blockchain transactions: Trust through audits11 ChatGPT prompts for maximum productivityCoinbase Wallet launches instant messaging feature with XMTPConsenSys releases ‘fuzzing’ tool to test smart contract vulnerabilitiesBinance’s CZ warns crypto community about emerging scam

News Feed

Economists Expect the Fed to Reveal Another 25bps Rate Hike Before Pausing for the Rest of 2023
Economists Expect the Fed to Reveal Another 25bps Rate Hike Before Pausing for the Rest of 2023 After the March rate hike by the Federal Reserve, economists believe that the recent
Worldcoin turns one: Looking back at a year of controversy and growth
Shiraz Jagati10 hours agoWorldcoin turns one: Looking back at a year of controversy and growthOne year in, Worldcoin’s vision of a universal digital identity system shows promise with millions of users.1248 Total views
Bank of America CEO: Regulation Won’t Let Us Engage in Crypto; Kiyosaki Talks Depression, Civil Unrest, and More — Bitcoin.com News Week in Review
Bank of America CEO: Regulation Won"t Let Us Engage in Crypto; Kiyosaki Talks Depression, Civil Unrest, and More — Bitcoin.com News Week in Review The new LUNA records gains amid
Brayden Lindrea7 hours agoShrapnel Web3 shooter won’t let US users cash out, thanks to GenslerAs soon as a gamer cashes out an in-game asset, they realize monetary value, which is where the problem with the Securities
Tom Blackstone3 hours agoCardano stablecoin project gambled away investors’ money before rug: ReportArdana claimed to be creating a stablecoin platform on Cardano, but new evidence suggests it may have lost investors
Biggest Movers: WAVES Falls to 1-Month Low, BCH Over 10% Higher on Wednesday
Biggest Movers: WAVES Falls to 1-Month Low, BCH Over 10% Higher on Wednesday WAVES fell to a one-month low during Wednesday’s trading session, as prices dropped for a second
Elisha Owusu Akyaw11 hours agoHashing It Out: What happens when cloud meets Web3?The guests on this episode of Hashing It Out discuss how cloud technology and Web3 intersect, with a special focus on user identity and reg
Montana County to Hold Public Hearings on Zoning Rules for Crypto Miners Amid Growing Complaints
Montana County to Hold Public Hearings on Zoning Rules for Crypto Miners Amid Growing Complaints Another U.S. county is facing troubles related to crypto mining
Solana Forms Ascending Triangle For Possible Breakout, Analyst Sets $565 Target
Este artículo también está disponible en español. Crypto analyst Trader Tardigradehas drawn the community’s attention to a bullish pattern that has formed for Solana. B
Cleanspark Buys US Bitcoin Miner for $19.4 Million, Plans to Quadruple Mining Capacity
Cleanspark Buys US Bitcoin Miner for $19.4 Million, Plans to Quadruple Mining Capacity Cleanspark Inc., a Nevada-based corporation, said Thursday that it is acqu
SEC Lawsuit: Tierion to Refund Investors From Its $25 Million Token Sale
SEC Lawsuit: Tierion to Refund Investors From Its $25 Million Token Sale The U.S. Securities and Exchange Commission (SEC) has taken action against another start
The Big Three Credit Agencies Critique El Salvador’s Bitcoin Adoption — S&P Global Warns of ‘Immediate Negative Implications’
The Big Three Credit Agencies Critique El Salvador’s Bitcoin Adoption — S&P Global Warns of "Immediate Negative Implications" All of the ‘Big Three’ credit agenci