Hacker in the US hacked into Trezor wallet to help user
A hacker recovered $2 million in cryptocurrency to a wallet’s owner who forgot the password
27.01.2022 - 09:15
197
1 min
0
What’s new? Joe Grand, known under the pseudonym Kingpin, has posted a video on YouTube in which he explained how he hacked into the Trezor One crypto wallet. The hacker broke into the wallet at the request of investors who had forgotten the password from him back in 2018. The accumulated investments amounted to about $2 million in cryptocurrency.
How did the hacker manage to hack the wallet? It took Grand 12 weeks to recover the lost PIN. During a firmware update, the Trezor One wallets temporarily move the code and key to RAM and then back to flash memory. Grand found that in the version of the firmware installed on the investors’ wallet, this information was not moved, but copied to RAM. This meant that if the hack failed and the RAM was erased, the PIN and key information would still be stored in the flash memory.
After using a fault injection attack, Grand still got the cherished numbers. After the hacker’s video of the hack was released, Trezor reported it was working on a fix for this vulnerability.
Useful material?
Market
Analysts note that from 2024 to 2030, tokens worth $155 billion will be unlocked
May 17, 2024
Technologies
The new mechanism has already made it possible to calculate over tens of millions of fraudulent addresses
May 16, 2024
Incidents
The amount of damage amounted to $25 million in cryptocurrencies
May 16, 2024
Market
FTX customers will be compensated in cash, unlike Mt. Gox and Gemini customers who will receive cryptocurrencies
May 16, 2024
Technologies
It is available to crypto wallet users worldwide as an additional feature
May 15, 2024
Market
The ex-official known for his initiatives to explore the potential of blockchain in the financial system has joined the board of directors of a fintech company
May 14, 2024