The tweet was deleted by the author.
But we saved everything 🙂.
Ledger has revealed that a critical vulnerability tied to entropy in the Trust Wallet browser extension enabled attackers to recover private keys from public wallet addresses, leading to a multi-million dollar crypto theft.
In late 2022, Ledger security researchers at the Donjon team identified the flaw, which impacted every wallet generated by the Trust Wallet extension. The bug has since raised urgent questions about wallet security and the importance of robust entropy generation in crypto applications. Trust Wallet has initiated remediation steps, but the incident underscores ongoing risks for digital asset holders.
View post on X Loading...
Earlier, Ledger’s CTO raised concerns about strong randomness in seed generation following vulnerabilities disclosed by both Coldcard and Trust Wallet, as reported here. Ledger has also highlighted its hardware security by offering $20 in free Bitcoin with select devices to promote device protection features. These developments frame the ongoing debate around wallet safety and secure key creation for crypto users.