Bitcoin Exchange Offers $3.5 Million Reward for Information of Stolen Bitcoins

Hong Kong-based Bitcoin exchange 'Bitfinex' that lost around $72 Million worth of its customers’ Bitcoins last week is now offering a reward of $3.5 Million to anyone who can provide information that leads to the recovery of the stolen Bitcoins. Bitfinex revealed on August 2 that the cryptocurren...

Bitcoin Phishing Campaign Uncovered

For the last month, attackers have used a combination of phishing and typosquatting to carry out a campaign aimed at stealing Bitcoin and blockchain wallet credentials. More than 100 phony Bitcoin and blockchain domains have been set up so far, many which mimic legitimate Bitcoin wallets. Most of...

Tinkoff Mobile Wallet - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tinkoff Mobile Wallet published at the 'play' market has multiple vulnerabilities...

Sensible Wallet Rewards - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sensible Wallet Rewards published at the 'play' market has multiple vulnerabilities...

Pass2U Wallet for Passbook - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Pass2U Wallet for Passbook published at the 'play' market has multiple vulnerabilities...

Mobile Recharge & Wallet - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Recharge & Wallet published at the 'play' market has multiple vulnerabilities...

Dogecoin Wallet - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dogecoin Wallet published at the 'play' market has multiple vulnerabilities...

Xapo · Bitcoin Wallet & Vault - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Xapo · Bitcoin Wallet & Vault published at the 'play' market has multiple vulnerabilities...

Mycelium Bitcoin Wallet - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mycelium Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Bitcoin Wallet - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Bitcoin Wallet - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Gift Wallet - Free Reward Card - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Gift Wallet - Free Reward Card published at the 'play' market has multiple vulnerabilities...

BASE Wallet - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application BASE Wallet published at the 'play' market has multiple vulnerabilities...

CoinSpace Bitcoin Wallet - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application CoinSpace Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Citrix Credential Wallet Service and Citrix Peer Resolution Service do not start

On the Citrix storefront services console, the Citrix Peer Resolution Service and the Citrix Credential Wallet services stay in stopped state, wouldn't start even if we start manually...

Coinbase: Transactions visible on Unconfirmed devices

Pusher authentication did not take device confirmation into account. This would allow an attacker with a valid session but an unconfirmed device to snoop on pusher updates like incoming transactions. This issue was in the coinbase event notification Pusher, which allowed me to read notification o...

Enter: No rate limit which leads to "Users information Disclosure" including verfification documents etc.

HOST api.romit.io Endpoint /v0/cash/auth/login Issue When an attacker tries to login at app.romit.io, he is prompted to enter the PIN . There is no rate limit to verify this. Although there is a an authorization header Authorization: Credential=b67b0b10571ac00444de3cffde0b5b05,...

Enter: Potential for financial loss, negative Values for "Buy fee" and "Sell Fee"

Issue It is possible to set negative values for the Buy Fee and Sell Fee, which will cause unexpected transfers etc. as these settings override the settings at the location. PoC 1. Go to the Operator Wallet's Settings. 2. Click on the users tab. 3. Select any user. 4. Go to settings tab of that...

Tails 1.3 Released, Introduces 'Electrum Bitcoin Wallet'

A new Tails 1.3 has been released with support to a secure Bitcoin wallet. Tails, also known as the 'Amnesic Incognito Live System', is a free security-focused Debian-based Linux distribution, specially designed and optimized to preserve users' anonymity and privacy. Tails operating system came t...

itBit Exchange: Leakage of sensitive wallet tokens to third party sites

Hello Itbit team This is Shahmeer and i am reporting a very critical issue in which the wallet tokens such as the one below are being leaked to third party websites https://beta.itbit.com/trading-history/402bd136-be8f-45e2-89ea-46e3283f8118 The above listed URL contains the wallet token that is...