Trust Wallet bug exposing wallet keys triggers crypto theft, Ledger reveals

Trust Wallet bug exposing wallet keys triggers crypto theft, Ledger reveals
Ledger finds Trust Wallet flaw

Ledger has revealed that a critical vulnerability tied to entropy in the Trust Wallet browser extension enabled attackers to recover private keys from public wallet addresses, leading to a multi-million dollar crypto theft.

In late 2022, Ledger security researchers at the Donjon team identified the flaw, which impacted every wallet generated by the Trust Wallet extension. The bug has since raised urgent questions about wallet security and the importance of robust entropy generation in crypto applications. Trust Wallet has initiated remediation steps, but the incident underscores ongoing risks for digital asset holders.

Earlier, Ledger’s CTO raised concerns about strong randomness in seed generation following vulnerabilities disclosed by both Coldcard and Trust Wallet, as reported here. Ledger has also highlighted its hardware security by offering $20 in free Bitcoin with select devices to promote device protection features. These developments frame the ongoing debate around wallet safety and secure key creation for crypto users.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.