Global Feed Post Login
Replying to Avatar Luke Dashjr

PSA: There is a supply chain attack on Bitcoin wallets going on.

HARDWARE WALLETS AND SIGNAL MAY BE AFFECTED. READ FURTHER.

I have not studied the full scope of this attack yet, but from what I hear, it can impact websites/webapps (including "local" webapps like Signal Desktop) and cause them to display a thief's address instead of the intended one.

This means hardware wallets will correctly display the actual send-to address, but you the human may compare the address to one that has already been replaced!

Regardless of what wallet you use, verify the address you are sending to without trusting a computer. Call your recipient and verify verbally.

Avatar
ManyKeys 3mo ago 💬 1

This concerns web3 and metamask predominantly?

Reply to this note

Please Login to reply.

Discussion

Avatar
SwBratcher 3mo ago

Even hardware wallets with companion apps that used npm.

Thread collapsed