# Пов'язані статті щодо Private Key

Центр новин HTX надає останні статті та поглиблений аналіз на тему "Private Key", що охоплює ринкові тренди, оновлення проєктів, технологічні розробки та регуляторну політику в криптоіндустрії.

Cardano Wallets Hit By SecondFi Exploit As Private Key Flaw Sparks Security Warning

SecondFi, previously linked to the Yoroi wallet, has halted services following a critical security flaw in its proprietary web-based wallet generation software. The vulnerability reportedly exposed private keys, leading to a significant theft of ADA tokens. Initial reports estimate losses of 16 million ADA (~$2.4M) from 374 wallets, while security firm SlowMist warns the broader impact could exceed 129 million ADA (over $20M). Crucially, the incident was confined to SecondFi's software; the Cardano blockchain protocol itself was not compromised. The core issue involves insecure private key generation, allowing attackers access to affected wallets. A primary warning for users is to avoid restoring compromised seed phrases into other wallets, as this would not resolve the underlying key exposure. Users are also cautioned against unverified recovery links or third-party refund platforms. The situation underscores that blockchain security extends beyond the protocol layer to include wallet software and key management. The community awaits a full post-mortem and confirmation of the final impact.

bitcoinist7 год тому

Cardano Wallets Hit By SecondFi Exploit As Private Key Flaw Sparks Security Warning

bitcoinist7 год тому

Cardano wallet exploit: SecondFi traces attack to private key flaw, warns users not to restore seed phrases

SecondFi has identified the root cause of the recent Cardano wallet exploit, which drained approximately 16 million ADA ($2.4 million) from 374 wallets. The attack stemmed from a deterministic nonce derivation flaw in its software signer, allowing attackers to mathematically reconstruct private keys from public blockchain data after transactions were signed. The company warns affected users not to restore their compromised recovery phrases into another wallet, as the vulnerability exists at the private key level, meaning addresses remain exposed. Users are advised against moving funds or withdrawing staking rewards and should instead await SecondFi's official recovery process. Emergency containment has secured around 129 million ADA pending recovery. SecondFi has launched a restoration fund, engaged external security auditors, and identified two attacker groups responsible for the automated draining campaigns between June 21 and 23. The platform remains in maintenance mode during ongoing security reviews.

ambcryptoВчора 16:17

Cardano wallet exploit: SecondFi traces attack to private key flaw, warns users not to restore seed phrases

ambcryptoВчора 16:17

Beosin: 36 Major Security Incidents in May Resulting in Over $76 Million in Losses

In May 2026, the Web3 ecosystem suffered over $76.15 million in losses across 36 major security incidents, according to Beosin Alert. The primary causes were contract vulnerabilities and private key leaks. The top loss involved the Verus-Ethereum Bridge, which lost $11.58 million due to a cross-chain message validation flaw—a vulnerability type historically responsible for massive losses at Wormhole and Nomad. The Echo Protocol attack, resulting from a private key leak, saw the minting of 1,000 eBTC (nominal value ~$76.7M), with the attacker netting ~$5.13 million due to liquidity constraints. Cross-chain bridges were the hardest-hit category, accounting for $27.995 million in losses. DeFi protocols were the most frequently targeted, with 14 attacks. Ethereum saw the highest chain-specific losses at over $48.76 million, followed by BNB Chain, Monad, and TON, indicating a multi-chain attack landscape. A detailed analysis highlighted three key incidents: 1. **Verus-Ethereum Bridge**: A flaw where the bridge contract verified proof from the Verus chain but failed to validate the underlying asset value, allowing fake outputs. 2. **Trusted Volumes**: A signature parameter defect in its RFQ system allowed an attacker to manipulate authorization checks and drain assets from the Resolver contract. 3. **Private Key Leaks (e.g., StablR)**: Operational failures, including inadequate multi-signature wallet thresholds and lack of timelocks, led to losses exceeding $25 million across multiple projects. The report concludes that the Web3 security threat landscape is expanding systemically. Risks now span code, infrastructure, interoperability, and human processes, moving beyond code audits alone. Projects are urged to enhance operational security, review old contracts, and users should regularly revoke unnecessary approvals.

marsbit06/10 09:26

Beosin: 36 Major Security Incidents in May Resulting in Over $76 Million in Losses

marsbit06/10 09:26

Humanity Loses $31 Million in Attack, Token Price Plummets 90% Due to a Single Private Key

On June 9th, the digital identity project Humanity Protocol suffered a major security breach resulting in over $31 million in losses. According to on-chain analyst Specter, hundreds of wallets holding the project's H token were drained. The attack was confirmed by founder Terence Kwok to be caused by the compromise of a foundation member's private key. As a precaution, users are advised to avoid interacting with Humanity's cross-chain bridge or liquidity pools. The incident caused the H token price to crash over 90%, from around $0.70 to a low of $0.052, wiping its market cap from $2 billion to approximately $35.7 million. The attacker allegedly minted 100 million new H tokens and is selling them for BNB. This breach adds to existing controversies surrounding Humanity Protocol. Founded in 2024, it aimed to verify human users via palm-print biometrics and zero-knowledge proofs. However, a leaked conversation in 2025 revealed that only about 1 million of its 9 million claimed Human IDs had completed biometric verification, suggesting 88% might be bots. Furthermore, the project has faced allegations of being a repackaged product from a Chinese access control vendor, raising privacy and authenticity concerns. Founder Terence Kwok's previous venture, Tink Labs, a hotel smartphone startup that raised $170 million, failed and entered bankruptcy in 2020 after burning through its funding. The current attack highlights the persistent critical issue of private key management in crypto. Unlike smart contract exploits, a private key compromise bypasses all on-chain security mechanisms. With no user compensation plan announced yet, this $31 million breach may be a final blow to the project's credibility, already weakened by previous controversies and a heavily depreciated token.

marsbit06/09 03:40

Humanity Loses $31 Million in Attack, Token Price Plummets 90% Due to a Single Private Key

marsbit06/09 03:40

Humanity Loses $31 Million, a Private Key Causes Token Price to Plunge 90%

On June 9th, the digital identity project Humanity Protocol suffered a major security breach resulting in over $31 million stolen from hundreds of wallets holding its H token. The attack was caused by the compromise of a private key belonging to a foundation member, leading the team to advise users against interacting with its bridge or liquidity pools. Following the incident, the price of the H token plummeted by over 90%, from around $0.70 to a low of $0.052, wiping out a significant portion of its market capitalization. The attacker allegedly minted 100 million new H tokens and began selling them for BNB. Humanity Protocol, founded in 2024, aimed to verify human users through palm-print biometrics and zero-knowledge proofs on Polygon CDK. Despite raising $50 million across two funding rounds and achieving a unicorn valuation, the project faced prior controversies. Shortly after its June 2025 token launch, reports emerged that only about 1 million of its 9 million registered IDs had completed biometric verification, suggesting 88% might be bots. Furthermore, allegations surfaced that the project might be a rebranded "shell" of a Chinese access control company, raising concerns about data privacy and authenticity. The project's founder, Terence Kwok, has a controversial business history. His previous venture, Tink Labs, burned through $170 million in funding before collapsing in 2020. The breach highlights the persistent critical risk of private key management in crypto. With no user compensation plan detailed in the initial response, the incident deals a severe blow to trust in a project already struggling with credibility issues.

Foresight News06/09 03:18

Humanity Loses $31 Million, a Private Key Causes Token Price to Plunge 90%

Foresight News06/09 03:18

The Evolution Path of Physical Bitcoin

The Evolution of Physical Bitcoin Bitcoin's digital nature is its core strength, enabling self-custody and rapid global transfers. However, its intangibility also hinders mainstream adoption. For over a decade, creators have attempted to materialize Bitcoin while preserving its cash-like properties, yielding notable results. Casascius Coins, launched in 2011, were the first and most iconic physical Bitcoin. Creator Mike Caldwell generated private keys offline, printed them on coins, and sealed them with tamper-evident holograms. This model relied on user trust in the centralized issuer. Production ceased in 2013 due to regulatory pressure from FinCEN. RavenBit Coins emerged in 2014 aiming to decentralize minting by letting users generate and apply their own keys. However, this led to trust issues with numerous untrusted minters and insecure key generation methods. In 2016, Coinkite introduced Opendimes—a breakthrough in bearer asset technology. These USB-shaped devices generate and store keys internally. Funds can be received by checking the public key, but spending requires physically breaking the device to extract the private key. While innovative and open-source, its cost (~$20) and form factor limit its use for small, everyday transactions. Satochip's Satodime, a card-shaped device using similar secure chip technology, followed. It supports NFC interaction and comes in various forms. While potentially cheaper in bulk (~13€), it remains a high-security hardware wallet, not a low-cost cash substitute. A fundamental cost barrier exists. For physical Bitcoin to achieve widespread commercial use, hardware costs must drop below $1 to match the production cost of fiat banknotes. Current secure chips capable of running Bitcoin's cryptographic algorithms (like secp256k1) are too expensive. Chips like NXP's NTAG X DNA (~$3) show cost-reduction potential but lack native Bitcoin curve support. Projects like OfflineCash embed chips in banknote-like paper, but face challenges with durability, the need for custom Bitcoin-enabled chips, and the inherent requirement for users to verify balances online—which conflicts with Bitcoin's trustless ideal. Coinkite's Tapsigner, a ~$20 card with a proprietary Bitcoin NFC chip, is seen as a more practical step forward. It functions as a reloadable hardware wallet for contactless payments, solving the "change" problem and focusing on real-world retail integration, a direction also pursued by companies like Cash App and Square. In summary, the journey to physical Bitcoin has progressed from trusted centralized mints (Casascius) to user-generated keys (RavenBit) and finally to self-contained secure hardware (Opendimes, Satodime, Tapsigner). The core challenge remains developing a sufficiently low-cost, durable, and truly trustless physical bearer asset that can function like cash in daily transactions. Current solutions are either too expensive or introduce new trust assumptions, keeping the ideal of ubiquitous physical Bitcoin just out of reach for now.

marsbit05/27 07:12

The Evolution Path of Physical Bitcoin

marsbit05/27 07:12

Cryptocurrency Asset Recovery: A Lucrative, Low-Profile Business

Summary: The article explores the growing business of cryptocurrency asset recovery, highlighting it as a quiet but profitable niche. While many assume recovery involves dramatic hacking or theft cases, the most common issues are everyday operational errors: sending crypto to the wrong blockchain network, forgetting transaction memos/Tags, hardware wallet failures, incorrect seed phrase backups, and frozen centralized exchange accounts. As cryptocurrency adoption expands to less technical users, the volume of such costly mistakes increases. This creates a genuine, recurring demand for professional recovery services. The article notes a paradox: while the technology emphasizes user-controlled assets, the complexity often necessitates expert intermediaries, similar to traditional financial services. However, the field is fraught with risks, including middlemen and secondary scammers who prey on desperate users. Truly professional teams avoid promising guaranteed results, instead focusing on diagnosing the specific problem—whether it's a technical wallet issue, an exchange compliance matter, or an unsolvable private key loss. The author concludes by noting the professionalization of this market and announces a partnership with a specialized recovery team, offering readers a preliminary assessment for issues like wrong-chain deposits, lost access, or frozen accounts, while emphasizing ethical practices and realistic expectations.

marsbit05/20 06:47

Cryptocurrency Asset Recovery: A Lucrative, Low-Profile Business

marsbit05/20 06:47

Lock.com Enters Early Access With Isolated Signing and Post-Quantum Architecture

Quantography Labs has launched the early-access phase for Lock.com, a hardware-free cryptocurrency wallet designed with an isolated, air-gapped security architecture. The platform eliminates the need for dedicated hardware wallets by separating the private key storage and signing process from internet-connected devices. Private keys remain entirely offline on a user-owned signer, while transaction creation and broadcasting occur on a connected device. This approach aims to remove dependency on third-party hardware manufacturers and their supply chains. Additionally, Lock.com integrates post-quantum cryptographic standards, including ML-DSA and ML-KEM. The early access release seeks user feedback ahead of a full public launch.

TheNewsCrypto05/18 11:52

Lock.com Enters Early Access With Isolated Signing and Post-Quantum Architecture

TheNewsCrypto05/18 11:52

This Man Was Locked Out Of His Bitcoin Wallet For 11 Years — Claude AI Got Him Back In

A Bitcoin holder known as @cprkrn recovered 5 BTC (worth ~$400K-$500K) on May 13, 2026, after being locked out of his wallet for over 11 years, crediting Claude AI for the breakthrough. While intoxicated in college, he changed his wallet password and forgot it. Despite having an old seed phrase and attempting professional recovery services and brute-force software, he remained locked out until Bitcoin surpassed $100,000. His recovery method involved uploading his entire old college computer's data into Claude. The AI forensicly identified an older wallet file and discovered a bug in the btcrecover utility that was concatenating a key with the password incorrectly. Claude corrected the decryption logic, extracted the private keys, and regained access to the funds. Blockchain data confirmed the wallet's first activity since 2015. The story went viral on X, garnering millions of views. The original ~$1,250 investment, made at roughly $250 per Bitcoin, had grown by approximately 32,500%.

bitcoinist05/14 14:32

This Man Was Locked Out Of His Bitcoin Wallet For 11 Years — Claude AI Got Him Back In

bitcoinist05/14 14:32

Crypto Wealth Ranking Unveiled: Satoshi Nakamoto Seals Divinity with $89 Billion, Yet Some Can't Access a Single Penny

Arkham's 2026 On-Chain Wealth Ranking reveals the fortunes and pitfalls of the crypto world. Satoshi Nakamoto leads with an estimated $89 billion in dormant Bitcoin, a mythical founder whose untouched assets underpin market faith. The active player Justin Sun follows with $1.5 billion in diverse assets, contrasting sharply with those who've lost access: James Howells, who threw away a hard drive holding $650M in BTC; Rain Lohmus, locked out of $589M in ETH; and Stefan Thomas, down to his last two password attempts for a $569M wallet. Other notable figures include Ethereum's Vitalik Buterin ($533M), seen as an idealist; Chinese veteran miner DiscusFish ($213M); POAP founder Patricio Worthalter ($149M); and trader James Fickel, who, despite holding 49k ETH, once lost $43M on a trade. The list highlights key trends: vast wealth often stems from early holding, private key security is paramount, and on-chain assets bring unprecedented transparency. Ultimately, it's a snapshot of crypto history where immense fortune and permanent loss are separated only by a private key.

marsbit05/10 05:23

Crypto Wealth Ranking Unveiled: Satoshi Nakamoto Seals Divinity with $89 Billion, Yet Some Can't Access a Single Penny

marsbit05/10 05:23

活动图片

Othersright-arrow

Regulatory Policyright-arrow