Amid troubles with some user wallets due to a vulnerability, MetaMask explained the issue is not as big as perceived. According to security researchers at Halborn, a blockchain security firm, the bug affects a small segment of users. The affected users are found across many browser-based wallets including MetaMask.
Importantly, the vulnerability that makes it possible to extract the Secret Recovery Phrase is said to be resolved eventually. However, the MetaMask team said they can not make guarantees about a specific timeline. Also, the bug does not affect MetaMask Mobile.
Vulnerability Affects Small Segment Of Wallets
Researchers said the Metamask security threat caused in rare edge cases was fixed for MetaMask Extension versions 10.11.3 and later. Dan Finlay, a developer working on MetaMask, said the bug impacts a small segment of MetaMask Extension users as well as users of other browser/extension wallets.
The researchers explained that users could be at risk if three conditions apply to the individual wallets. If the user’s hard drive is unencrypted and the user imported Secret Recovery Phrase into a MetaMask extension on a different device, besides one more condition, the user is at risk. Another condition is that at the same time, the user used the ‘Show Secret Recovery Phrase’ checkbox to view the Phrase on-screen.
“This vulnerability is most likely to affect users who had a device compromised after importing Secret Recovery Phrase into MetaMask.”
Trending Stories
MetaMask said it introduced new protections and that it will continue to reduce the risk.
Transfer Of Funds From Compromised Wallet
The researchers recommended migrating funds from the vulnerable accounts to be on the safe side from the Metamask security threat. Also, for those users who think their computer is not safe from access to others, the researchers have a suggestion. Those computers that are not physically secure from other people should have full disk encryption enabled on the system.
Last month, MetaMask announced integrating Coinbase Pay on its platform to allowing easy payment access for Web 3.0 developers with dApps.
- Elrond Price Jumps By 9% Over This Announcement
- XRP Holding Better Than Most Altcoins, Here’s Why
- Breaking: Polygon, Major Blockchains Hit With Network Attack
- New Crypto Rules In Europe: A Global Standard For Regulation?
- Third Biggest Whale Adds 1,416 Bitcoins In Last 2 Days; Will This Pump BTC?
- ‘Big Short’ Michael Burry Says Bitcoin Crash Is Only Halfway Through
- These Whales Scoop $850 mln Worth FTX Tokens Ahead Of BlockFi Deal
- Breaking: El Salvador Buys 80 Bitcoin (BTC), Here’s How Prices Reacted
- U.S. DoJ Slaps Charges Against Promoters of Baller Ape Club NFT In Rug Pull Scam
- Canada-based Ledn Challenges FTX’s Bid of BlockFi Acquisition With Better Proposal
- Polygon Price Analysis: V-top Reversal may Direct MATIC to $0.31 Support
- ETH Price Analysis: Is Ethereum Dropping To Three Digits?
- Bitcoin Price Analysis- BTC on Losing Streak Nearing $17800; Will it Hold?
- NEAR Price Analysis: Falling Prices Eye $3 Breakdown; Should Coin Holders Worry?
- SHIB Price Analysis: Sustained Selling may Lead $SHIB to $0.0000074?
- Sandbox Price Analysis: Crashing SAND Prices Warns 25% Downfall
- Solana Price Analysis: $36 Breakdown Teases SOL Price to Revisit $26
- Chainlink Price Analysis: Wedge Pattern could Lead LINK price below to $5
- AAVE Price Analysis: Buyers Need $76.6 Breakout to Trigger Bullish Recovery
- Apecoin Price Analysis: Rising APE Price Knockout Another Barrier; is $6 Next?