OneKey Fixes Hardware Glitches that Got It Hacked
OneKey, a Digital exchange hardware wallet provider, announced that it has already amended the flaw in its hardware that enabled one of its hardware wallets to be accessed in one-second fiat.
Over the weekend, a video on YouTube uploaded by a cybersecurity start-up Unciphered indicated they had located a loophole to utilize a huge crucial vulnerability in the effort to hack OneKey Mini.
According to a partner at Unciphered, Eric Michaud, by taking apart the device and inserting coding, it was likely to reset the OneKey Mini to factory default and bypass the protection passwords, enabling a prospective hacker to eliminate the mnemonic phrase utilized to regain a wallet.
Eric Michaud further explained that if you have the secure Element and the Computer. The Secure Element is where one store’s digital keys are. The data is encrypted between the Computer and the Secure Element.
However, it was not designed to operate like that in this case. So what happens is one might put a tool in the middle that manages the data and intercepts it and then uploads their prompts, Eric Michaud added, articulates the secure Element it is factory default and withdraw virtual crypto assets secured in the secure Element, he concluded.
However, over the weekend, OneKey issued a statement confirming that it has already amended the security glitches revealed by Unciphered, reporting that its hardware developers had upgraded the security protocol without affecting anyone and all exposed dangers are being fixed.
Although, the company further explained that the vulnerability identified by Unciphered could only be executed by taking apart the device and physically accessing it through a dedicated FPGA device in the laboratory.
It is worth noting that during their discussions, it was realized that other accounts were found to have the same glitch, and Unicephered was rewarded heavily for their contribution to the company’s security.
OneKey Initiative Towards Securing User Wallets
OneKey has announced that it has already gone to extreme pains to ascertain the protection of its customers, including securing them from distribution chain vulnerabilities, when a prospective hacker infiltrates a genuine account and replaces it with one managed by them.
The company’s measures have comprised tamper-proof packaging for distribution and utilization of supply chain service providers from Apple to ascertain the stringent supply chain protection system. They anticipate adopting onboard authentication and updating newer hardware accounts with advanced protection components.
The company also announced that the primary motive of hardware accounts has always been to secure customers’ funds and virtual crypto assets from external attacks such as computer viruses and other remote vulnerabilities but recognized that, unfortunately, nothing could be 100% protected.
Focusing on the real hardware accounts development procedures, from silicon crystals to chip code, from firm to software, it’s correct to argue that with adequate funds, resources, and time, any hardware holder can be vulnerable, even if it’s a nuclear equipment management system.
Wormhole Hacker Succeeds in Moving Stolen Funds
According to the PeckShield report, the unlawfully acquired crypto assets from one of the industry’s largest exploits are on the go. With information indicating that another forty-six million dollars of stolen assets have been moved from the hacker’s account.
The hack was the third largest hack last year, where about 321 million ETH was stolen. The hacker seems to be looking for yielding loopholes in their stolen loot as the assets were flipped for 16.6 million DAI.
