Major Security Bug Found In Coinomi Wallet; Did Google Spell Check Cause a $70k Hack

Major security issue regarding the Coinomi Wallet has been found by security experts Jonathan Sterling and Luke Childs.

Founded back in 2014, Coinomi is the oldest multi-asset wallet available, with millions of active users. Coinomi is a security-first, multi-asset wallet for both mobile & desktop that provides native support and true ownership for as many as 125 blockchains & 382 tokens — a total of 507 assets.

According to the Reddit post that broke the news, the security professionals say:

“When you enter your seed phrase to recover a new wallet, the Coinomi app makes a request to Google's spellcheck API to spellcheck the seed phrase. Yup, I know. The plain text seed phrase is accessible to Google (although transport uses SSL so it's encrypted over the wire). However, this does mean that if you're using Coinomi your seed phrase is likely sitting in plain text logfiles at Google, accessible to a large number of employees.”

This is why Google has all your keys. Everyone needs a hardware wallet and should never input their private key or mnemonic onto any isolated device.

The credit for this breaking news goes to Warith Al Maawali who found the vulnerability. He's also claimed he's lost about $70k of funds from his wallet and Coinomi is avoiding the question of whether they'll reimburse him. This is why he's now decided to go public.

On his blog post, he writes:

“To understand how catastrophic the security issue is, they simply take your crypto-currency wallet’s passphrases/seeds and spell check it by sending it remotely to Google servers in clear plain text! They did not take the responsibility of my loss, I gave them more than 24 hours before full disclosure, they fixed the issue without notifying their users and they kept procrastinating like scumbags to buy more time.”

He summed it all up on his website, https://www.avoid-coinomi.com/.

Most users who noticed this vulnerability are shocked by this with many saying that they are going to not use the wallet anymore.

Get Free Email Updates!

*Action* Enter Best Email to Get Trending Crypto News & Bitcoin Market Updates

I will never give away, trade or sell your email address. You can unsubscribe at any time.

Sritanshu Sinha
Sritanshu Sinha
Sritanshu has a keen interest in emerging technologies, startups and economic anthropology. He holds the view that cryptocurrencies are the best bet humanity has got to push the world towards a borderless economy.

[Alert] Use the author's self-conducted information at your own risk, do you own research, never invest more than you are willing to lose.

[Disclosure] The published news and content on BitcoinExchangeGuide should never be used or taken as financial investment advice. Understand trading cryptocurrencies is a very high-risk activity which can result in significant losses. Editorial Policy \\ Investment Disclaimer

LEAVE A REPLY

Please enter your comment!
Please enter your name here

3,468FansLike
2,795FollowersFollow
4,235FollowersFollow

Live Bitcoin Price & Latest BTC Charts

Today's Latest Crypto News

YFI’s Andre Cronje isn’t Going Anywhere; ‘This Space Won't Get Rid of Me'

Andre Cronje, the guy behind yEarn and the popular YFI, is not leaving the cryptocurrency space any time soon, at least, “until there is...

Crypto Mom, Hester Peirce, Secures Second Term as SEC Commissioner Through 2025

The US Securities and Exchange (SEC) Commissioner Hester Peirce, aka “Crypto Mom,” has been confirmed for a second term that will last till June...

yEarn Expanding its Ecosystem to Bring in Hot DeFi Tokens into the Mix

DeFi craze continues to get hotter as the system grows. yEarn’s zero supply valueless token YFI climbed to a new high today at $5,300 and...

Bitcoin Dollar Cost Averaging From 2017 Market Peak Still Returned 61.8%

Bitcoin price remains strong, not far from hitting $12,000 yet again after the touch and go over the weekend. Interestingly, despite the fact that the...

DEX Leader Raises $11 Million in Series A Funding for Uniswap V3 Following an Explosive Month

A popular and widely used decentralized exchange (DEX) Uniswap has raised $11 million in Series A funding led by Andreessen Horowitz with additional investment...

BitcoinExchangeGuide is a hyper-active daily crypto news portal with care in cultivating the cryptocurrency culture with community contributors who help rewrite the bold future of blockchain finance. Subscribe on Google News, see the mission, authors, editorial links policy, investment disclaimer, privacy policy. Got News? Contact us, we are human too. Note: nothing here is financial advice, do your own research thoroughly.

Start Using Crypto Today