This Popular Hardware Wallet Can Be Breached Physically in 15 Minutes – Kraken

By Vinnie Singh
keepkey

Hardware wallets have a reputation of being one of the safest wallets for storing cryptocurrency. Though they are more expensive option, many cryptocurrency investors prefer them over soft wallets and paper wallets. However, Kraken Security Labs has found a serious flaw with Keepkey Hardware wallets, which makes them susceptible to getting breached easily. 

Advertisement
Advertisement

This Glitching Device Can Help Break Into Keepkey

Per a blog published by Kraken Security Labs, there is a way by which seeds can be extracted from a Keepkey hardware wallet. It only takes a hacker about 15 minutes with the wallet to extract the seeds.

Source: Kraken Blog

The breach takes place with a voltage glitching device, which, according to Kraken Security Labs, can be developed for $75. Though the encrypted seeds in the wallet are protected by a 1-9 digit pin, they are not immune to brute force, and using the voltage glitching device, they can be accessed easily. According to the blog, the microcontroller has inherent flaws which the attack exploits, and there is no other way to fix it except for a hardware redesign.

The blog recommends that the users should not allow physical access to the wallet, and warns that if users lose their Keepkey then their cryptocurrency is at a risk of being stolen with this attack. It also recommends users to enable their BIP39 Passphrase with the KeepKey Client.

Advertisement
Advertisement

Keepkey’s Response to the Findings

Keepkey has responded to the Kraken blog, saying that they are already aware of the issue, and at the time the issue had been identified, they had advised their users to use the BIP39 passphrase. In the blog, they also stated that the claim that the wallet can be hacked in 15 minutes is misleading –

“It’s misleading to claim the device can be hacked in 15 minutes. Executing this attack requires significant preparation and expertise as well as specialized equipment, and assumes physical possession of the device.”

Nevertheless, they have emphasised on securing cryptocurrency against attacks using BIP39 passphrase, and not allowing others physical access to the Keepkey hardware wallet.

Advertisement
Vinnie Singh
All things Blockchain & Crypto. 3 years for writing for Crypto Publications, ICOs and Blockchain cos. Book Junkie. Travel Freak. Food rules my mood. Enough said. Follow me on X @vinniesingh7 or mail me at vinnie[at]squadx.io
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.