CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2021-37103

There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality...

Malicious code in wallet-rpc (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4258 Malicious code in wallet-rpc (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2019-15947

In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command...

CVE-2019-13098

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 Jel...

CVE-2011-4447

The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and...

CVE-2019-13096

TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/sharedprefs/.xml to gain unauthorized access...

CVE-2011-4770

The QIWI Wallet ru.mw application before 1.14.2 for Android does not properly protect data, which allows remote attackers to read or modify financial information via a crafted application...

Malicious code in wallet-chii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b348aa31d5d8beaa0b2d5dbc117c094a25dfaf9c0d515d0a97ed4df897bac25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wallet-chii

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4139 Malicious code in wallet-chii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b348aa31d5d8beaa0b2d5dbc117c094a25dfaf9c0d515d0a97ed4df897bac25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4054 Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in web3-provider-wallet

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in buidl-wallet-contracts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in defi-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3779 Malicious code in defi-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases

Cybersecurity researchers have exposed what they say is an "industrial-scale, global cryptocurrency phishing operation" engineered to steal digital assets from cryptocurrency wallets for several years. The campaign has been codenamed FreeDrain by threat intelligence firms SentinelOne and Validin...

Malicious code in buidl-wallet-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5221b4cdc1f6532fbece9f61c742fbfdd72e88d8fc1d5ed8c9dcae92157e8 Any computer that has this package installed or running should be considered...