BlueWallet’s chief technology officer said a review of iOS apps labeled as non-custodial crypto wallets identified 45 that may carry severe or high-risk security problems. The screening covered 904 apps, with 494 undergoing analysis. Of the flagged apps, 23 were categorized as potentially severe risk and 22 as high risk. The issues cited include suspected uploading of seed phrases or private keys to servers, insufficient randomness in wallet generation, server-side key storage, the use of hardcoded encryption keys, and loading unsigned JavaScript code capable of interacting with sensitive wallet data. The CTO also cautioned that the findings may include false positives, and that apps not listed should not automatically be considered safe.
According to Odaily, BlueWallet’s chief technology officer said the team screened 904 iOS apps labeled as non-custodial crypto wallets and analyzed 494 of them, ultimately flagging 45 for possible severe or high-risk security issues.
Among the 45 apps, 23 were classified as potential severe risk, while 22 were marked as high risk.
Main security concerns identified
The problems cited include suspected uploading of seed phrases or private keys to servers, insufficient randomness in generated wallets, storing keys on the server side, using hardcoded encryption keys, and loading unsigned JavaScript code that can interact with sensitive wallet data.
The BlueWallet CTO said the results may contain false positives and warned that apps not appearing on the list should not automatically be treated as safe.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
