Posts

Showing posts with the label hardware

OneKey says it's fixed the flaw that got its hardware wallet hacked in 1 second

Image
Unciphered posted a video showing a "Massive critical vulnerability" in the OneKey Mini. The creators noted it's been patched and is now working on further securing the wallet. Crypto hardware wallet provider OneKey says it has already addressed a vulnerability in its firmware that allowed one of its hardware wallets to be hacked in one second flat. On Feb. 10, a video on YouTube posted by cybersecurity startup Unciphered showed they had figured out a way to exploit a "Massive critical vulnerability" in order o "crack open" a OneKey Mini. According to Eric Michaud, a partner at Unciphered, by disassembling the device and inserting coding, it was possible to return the OneKey Mini to “factory mode” and bypass the security pin, allowing a potential attacker to remove the mnemonic phrase used to recover a wallet .  "You have the CPU and the secure element. The secure element is where you keep your crypto keys. Now, normally, the communications are e...