Hacker News new | ask | show | jobs
by 676234e117 1423 days ago
It appears this is mostly targeting specific hot wallet software that may have some compromised downstream signing library, since the wallets are closed source it is difficult for the community to get to the root of the problem.

Storing value on closed source hot wallets is generally not a good idea.
1 comments
cypress66 1423 days ago
It's insane that it's closed source.

Metamask (most popular eth hot wallet) unfortunately is proprietary too nowadays (some commercial restrictions) [1] but at least you can build it yourself, all commits are visible and it's developed in a semi open way.

[1] https://github.com/MetaMask/metamask-extension/blob/develop/...

link
Stevvo 1423 days ago
To me big potential issue about Metamask is if a compromised update got pushed out; a lot of damage could be done before people noticed even if it would be discovered immediately.
link