Researchers expose a flaw in at least three major crypto wallets, Ledger Live, Edge, and Breadwallet, which could be exploited for double-spending users' funds
Daniel Kuhn / CoinDesk :
CoinDesk Daniel Kuhn
Related Coverage
- Unveiling BigSpender: Double (and Multiple) Spend Vulnerability in Major Bitcoin Wallets ZenGo
- Fix Issued For ‘Serious’ Bitcoin Wallet Security Threat Forbes
- Crypto Hardware Wallet Ledger: ‘Funds are Safe’ After ‘BigSpender’ Vulnerability Found BitcoinExchangeGuide
- A vulnerability in some bitcoin wallets leads to double spend attacks and inflated balance TechCrunch
- The Bitcoin Wallet Double-Spend Issue Remains, According to BCH Backer InsideBitcoins.com
- BCH Backer Claims Bitcoin Wallet Double-Spend Issue Hasn't Been Fixed Cointelegraph
- Vulnerability in some popular bitcoin wallets can be exploited to commit fraud SiliconANGLE
- Bitcoin Wallets were Letting People Get Scammed with Faulty Balances Crypto Briefing
- “BigSpender” Exploit in Some Bitcoin Wallets Allows Attackers to Fake Transactions forklog.media
- Double-Spending Flaw Found in Major Bitcoin Wallets The Mac Observer
- Trickery is Not a Vulnerability - Replace By Fees Ledger
- Three major Bitcoin wallet apps found vulnerable to fraud; could be bricked 9to5Mac
Discussion
-
@bobmcelrath
Bob McElrath
on x
This shouldn't have been newsworthy. Check the RBF flag. Users, check that your wallets handle RBF correctly. https://www.coindesk.com/...
-
@coindesk
@coindesk
on x
ICYMI: “The only thing you can rely on is transactions that have been mined.” https://www.coindesk.com/... via @DanielGKuhn
-
@bascule
@bascule
on x
Hilarious Bitcoin vulnerability: because it has on-chain bandwidth roughly equivalent to a 14.4kbps modem, it sees huge transaction fee spikes whenever there's a meager transaction volume. So they added a “Replace by Fee” (mis)feature and... https://zengo.com/...
-
@vikmeup
Vikmeup.Eth
on x
Great findings, also applicable for Ethereum as it allows you to override nonce value for pending transactions too. https://twitter.com/...
-
@zengo
@zengo
on x
🚨 Imagine receiving $100. You think you received the funds, but they never really arrived, and the worst is yet to come. Today, we introduce #BigSpender: a vulnerability in some of #Bitcoin 's most popular wallets, allowing attackers to double (and multiple) spend. https://twitte…
-
@peterktodd
Peter Todd
on x
Also, this is just hilarious: “Like other vulnerabilities found in Bitcoin's core codebase, such as timelocked transactions, the RBF function has become a standard way for users to send value back and forth.” Yes, Bitcoin Core runs on exploits. 🤦♂️ https://web.archive.org/...
-
@lopp
Jameson Lopp
on x
Accepting bitcoin transactions without waiting for them to be confirmed is like accepting a check and not waiting to see if it bounces. The whole point of the blockchain is to solve the double-spend problem. https://www.coindesk.com/...