Twitxy Saved

Bullish Ones📈

Verified account This account is verified. Learn more

@Bullish_Ones

Empowering the next wave of Web3 natives. Alpha. Collaboration. Community.

Founder: @the_mhikuun
hub.xyz/bullish-ones Joined May 2022
6 Following 8K Followers 1.4K Posts

Latest posts 5

Bullish Ones📈 Verified account @Bullish_Ones
The secret phrases were too easy to guess.

About $1.3–1.4 million from 1,404 wallets

A project called Qubic created secret recovery phrases for its users in a weak way (using ordinary computer randomness instead of strong randomness).

On some phones and computers those phrases were predictable enough that someone could simply figure them out.

Between 17 and 18 October, 1,404 wallets were emptied of roughly $1.3–1.4 million.

The network was halted. They fixed the method for new users; anyone who already had a weak phrase still has it.

Source:

cryptobriefing.com/slowmist-qubic…
cryptobriefing.com SlowMist traces Qubic wallet theft to weak randomness in seed generation SlowMist traced the theft of 2.94 trillion QU from 1,404 Qubic wallets to weak seed randomness that let keys be recovered from network headers.
Bullish Ones📈 Verified account @Bullish_Ones Oct 26
How people lost money in crypto this month.

Every month a lot of money disappears in crypto. Most people outside the space never see the details. This October, the bigger losses still came from ordinary failures of access and trust rather than complicated new technology.

Here is what actually happened, with the numbers and sources.

Someone opened the packages before they arrived

Roughly $86–91 million

Ledger makes small devices that people use to keep their crypto safer. In theory the device itself is hard to break into.

This month people ordered genuine Ledger devices from a seller in Southeast Asia called CryptoBilis. Someone opened the packages after the devices left the factory, added a tiny extra piece of hardware, and resealed them.

When the new owners set the devices up and wrote down their secret recovery words, the extra hardware read the words off the screen and sent them out over the mobile network.

Ledger’s own chip and software were not broken. The devices had simply been touched on the way to the buyer.

Researchers tracking the stolen money put the total around $86–91 million across hundreds of wallets.

Ledger has confirmed the implant and the distribution attack.

Sources:

ledger.com/blog-response-…

galaxy.com/insights/resea…
View quoted post on X
8 replies 24 reposts 20 likes 404 views View on X
Bullish Ones📈 Verified account @Bullish_Ones
How people lost money in crypto this month.

Every month a lot of money disappears in crypto. Most people outside the space never see the details. This October, the bigger losses still came from ordinary failures of access and trust rather than complicated new technology.

Here is what actually happened, with the numbers and sources.

Someone opened the packages before they arrived

Roughly $86–91 million

Ledger makes small devices that people use to keep their crypto safer. In theory the device itself is hard to break into.

This month people ordered genuine Ledger devices from a seller in Southeast Asia called CryptoBilis. Someone opened the packages after the devices left the factory, added a tiny extra piece of hardware, and resealed them.

When the new owners set the devices up and wrote down their secret recovery words, the extra hardware read the words off the screen and sent them out over the mobile network.

Ledger’s own chip and software were not broken. The devices had simply been touched on the way to the buyer.

Researchers tracking the stolen money put the total around $86–91 million across hundreds of wallets.

Ledger has confirmed the implant and the distribution attack.

Sources:

ledger.com/blog-response-…

galaxy.com/insights/resea…
8 replies 9 reposts 16 likes 803 views View on X