Fun

News Feed - 2023-08-10 02:08:00

Tom Blackstone6 hours agoOnly 6 out of 45 crypto wallet brands have undergone penetration testing: ReportCybersecurity certification platform CER said the vast majority of wallets do not hire outside experts to perform penetration tests.3213 Total views86 Total sharesListen to article 0:00NewsJoin us on social networksA July report from cybersecurity certification platform CER found that only six of 45 cryptocurrency wallet brands, or 13.3%, have undergone penetration testing to find security vulnerabilities. Of these, only half have performed tests on the latest versions of their products.


The three brands that have done up-to-date penetration tests are MetaMask, ZenGo and Trust Wallet, according to the report. Rabby and Bifrost performed penetration testing on older versions of their software, and Ledger Live did it on an unknown version (listed as “N/A” in the report). All other brands listed did not provide any evidence of having done these tests.


The report also provided an overall ranking of the security of each wallet, listing MetaMask, ZenGo, Rabby, Trust Wallet and Coinbase Wallet as being the most secure wallets overall.CER rankings for wallet security. Source: CER


“Penetration testing” is a method of finding security vulnerabilities in computer systems or software. A security researcher attempts to hack into the device or software and use it for purposes it wasn’t intended for. In most cases, a penetration tester is given little to no information about how the product works. This process is used to simulate real-world attempts at hacking to uncover vulnerabilities before the product is released.


CER found that 39 out of 45 wallet brands didn’t perform any penetration testing at all, not even on older versions of the software. CER speculated that the reason may be that these tests are expensive, especially if the company makes frequent upgrades to their products, stating, “We attribute it to the amount of updates an average app has, where each new update can disqualify the pentest made earlier.”


CER found that the most popular wallet brands were more likely to perform security audits, including penetration tests, as they often had the funds to do so:“Essentially, popular wallets tend to adopt more robust security measures to protect their increasing user base. This seems logical — a higher user base often corresponds to more significant funds to secure, more visibility, and consequently, more potential threats. It can also result in a positive feedback loop, with more secure wallets attracting new users in higher numbers than the less secure ones.”


CER’s ranking of wallets was based on a methodology that included factors like bug bounties, past incidents, and security features such as restore methods and password requirements.


Although most wallet brands don’t perform penetration testing, CER stated that many of them do rely on bug bounties to find vulnerabilities, which is often an effective means of preventing hacks. The firm rated 47 out of 159 individual wallets as “secure” overall, meaning that they had a security score of above 60. These 159 wallets included some that were from the same brands. For example, MetaMask for Edge browser was considered a separate wallet from MetaMask for Android.


Related:Bug bounties can help secure blockchain networks, but have mixed results


Wallet security has become an urgent issue in 2023, as over $100 million was lost in the Atomic Wallet hack on June 3. The Atomic team has speculated that the breach may have been caused by a virus or injection of malware in the company’s infrastructure, but the exact vulnerability that allowed the attack is still unknown. Web wallet MyAlgo also suffered a security breach in late February, resulting in an estimated loss to users of over $9 million.# Blockchain# Wallet# Adoption# Hardware Wallet# Mobile Wallet# Cybersecurity# Hot wallet# HacksAdd reactionAdd reactionRelated NewsHow to track and report crypto transactions for tax purposesEnsuring integrity of blockchain transactions: Trust through audits11 ChatGPT prompts for maximum productivityCoinbase Wallet launches instant messaging feature with XMTPConsenSys releases ‘fuzzing’ tool to test smart contract vulnerabilitiesBinance’s CZ warns crypto community about emerging scam

News Feed

Shark Tank’s Mark Cuban Says Bitcoin Is a Store of Value but ‘More Religion Than Solution to Any Problem’
Shark Tank’s Mark Cuban Says Bitcoin Is a Store of Value but "More Religion Than Solution to Any Problem" Shark Tank star and the Dallas Mavericks’ owner
OVR Land Map: The Biggest Detailed 3D Map of the Real World With NFTs
OVR Land Map: The Biggest Detailed 3D Map of the Real World With NFTs sponsored OVR AR Metaverse goes to a whole other level.Italian company OVRis announcing today the creation of t
Ana Paula Pereira7 hours agoRipple acquires Fortress Trust, expands license portfolio in the USFortress holds a Nevada Trust license for asset custody. Ripple holds more than 30 licenses across the United States.6914 Tot
Brian Quarmby7 hours agoOpenAI pauses ChatGPT’s Bing feature, as users were jumping paywallsOpenAI found a bug in its Browse plugin that inadvertently allowed users to read paywalled articles in some cases.5394 Total v
Interest in Russian Crypto Channels on Telegram Declining, Analysis Shows
Interest in Russian Crypto Channels on Telegram Declining, Analysis Shows Russians have been losing interest in Telegram channels devoted to cryptocurrencies and tokens, according
Digital Currency Group first-quarter revenue jumps 51% despite GBTC outflows
Ana Paula Pereira4 hours agoDigital Currency Group first-quarter revenue jumps 51% despite GBTC outflowsRevenue at Digital Currency Group (DCG) increased 51% to $229 million in the first quarter of 2024, driven by the re
Meta signals enterprise pivot for metaverse
Tristan Greene4 hours agoMeta signals enterprise pivot for metaverseMeta says enterprise apps, AI, and messaging will transform the metaverse.1402 Total views3 Total sharesListen to article 0:00NewsOwn this piece of cryp
CoinDCX crypto exchange acquires BitOasis, expands into MENA region
Josh O"Sullivan12 hours agoCoinDCX crypto exchange acquires BitOasis, expands into MENA regionCoinDCX’s acquisition of BitOasis opens new opportunities in the Middle East and ensures regulated and secure trading.1593 T
Microsoft launches AI-powered ‘Copilot for Finance’
Tristan Greene3 hours agoMicrosoft launches AI-powered ‘Copilot for Finance’The new service will provide automation features for the Microsoft 365 suite of productivity tools and applications.750 Total views52 Total
Federal Reserve’s Major Policy Shift to ‘Push Up Inflation’ Could Send Bitcoin Price to $500K
Federal Reserve"s Major Policy Shift to "Push Up Inflation" Could Send Bitcoin Price to $500KThe U.S. Federal Reserve has announced a significant policy change to push up inflation.
Japanese Online Retail Giant Rakuten Launches NFT Marketplace
Japanese Online Retail Giant Rakuten Launches NFT Marketplace Rakuten Group, the Japanese electronic commerce and online retail company based in Tokyo has announced the launch of a
Turner Wright6 hours agoSam Bankman-Fried’s legal team moves to pursue theory on FTX terms of serviceLawyers petitioned the court to allow them to question witnesses for the prosecution based on FTX’s terms of servic