BlueWallet’s chief technology officer said he screened 904 iOS apps on Apple’s App Store that were labeled as non-custodial crypto wallets and closely analyzed 494 of them, according to Bitcoin News. The review ended with 45 apps being marked as having potentially severe or high-risk security issues. Of those, 23 were classified as potential severe risks and 22 as high risks. Reported issues included suspected uploading of seed phrases or private keys to servers, insufficient randomness in wallet generation, server-side key storage, the use of hardcoded encryption keys, and loading unsigned JavaScript code that could interact with sensitive wallet data. The BlueWallet executive also warned that the findings may include false positives and said apps not listed should not automatically be treated as safe. For users storing large amounts of bitcoin, he said App Store approval and an app’s reputation alone are not enough grounds to trust the software.
BlueWallet’s chief technology officer said he screened 904 iOS applications on Apple’s App Store that were labeled as non-custodial crypto wallets, according to Bitcoin News. He said 494 of those apps were analyzed, and 45 were ultimately flagged as having potentially severe or high-risk security problems.
Among the 45 apps, 23 were categorized as potential severe risks and 22 were labeled high risk. The issues cited included suspected uploading of seed phrases or private keys to servers, weak randomness in wallet generation, storing keys on servers, using hardcoded encryption keys, and loading unsigned JavaScript code capable of interacting with sensitive wallet data.
The BlueWallet executive said the analysis may contain false positives and added that apps not included on the list should not be assumed to be safe. He also cautioned that when large amounts of bitcoin are being stored, App Store approval and an app’s reputation alone are not sufficient reasons to trust the software.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
