Crypto wallet provider Tangem recently addressed a critical security flaw in its mobile app that inadvertently exposed users' private keys during email interactions with customer support.
The vulnerability, first brought to light in a Reddit post by user "u/areklanga" on 29 December, revealed that private keys were being stored in email histories, potentially accessible to Tangem employees.
The user stated:
“So, user private keys remain in both user email history, Tangem email history, and perhaps in some Tangem ticket tracking system and are available for Tangen employees. Which makes all Tangem users compromised.”
Following intense scrutiny from the community, Tangem acknowledged the issue on 30 December, attributing it to a bug in the app's log processing function.
The company assured users that the bug had been "fully resolved" and emphasized its limited scope, affecting only those who generated a seed phrase and immediately contacted support.
Tangem said in a statement on Reddit:
“When creating a wallet with a seed phrase, the private key was mistakenly logged in the application's logs. These logs could later be accessed during interactions with our support team.”
Tangem also confirmed that all affected logs had been deleted.
While the swift resolution offers some reassurance, the incident has ignited broader concerns about security practices and transparency within the crypto wallet space, challenging Tangem to rebuild trust among its users.
Despite Tangem's swift action to resolve the security vulnerability, concerns have emerged within the crypto community about the company's approach to communication.
Critics pointed to the absence of public announcements on Tangem's official social media channels, leaving many users unaware of the issue.
One Reddit user noted:
“I find it frustrating how Tangem is downplaying the scope of this event. While they claim that only a "very small group of users" sent an email with their keys, how many users had their keys written in plain text to their phones in a log file?”
As of now, Tangem has yet to issue a formal statement on its social platforms regarding the incident.
However, they did respond to a user's comment on X (formerly known as Twitter).
In the meantime, the company has urged users to update their mobile apps to the latest version to ensure protection against the identified risk.
The situation raises important questions about the balance between transparency and timely action in maintaining trust within the crypto space.
South Korean soldiers are compromising military secrets to secure loans for cryptocurrency investments, reflecting financial desperation amid rising debt. An investigation found 29 cases of leaked classified information, raising serious concerns about national security and the need for stricter measures to protect sensitive data.
AnaisIt's quite incredible. This may be the first time that people hope that the National Day will pass quickly. The arrival of the National Day holiday has pressed the "pause button" on the recent rising market, and investors are itching to watch the A-share market close.
AlexCrypto scammers are leaving the TON blockchain due to a lack of high-value targets, as fewer wealthy investors remain on the network. With TON's growing popularity and security measures, scammers are shifting their focus to other platforms, like Bitcoin, for better opportunities.
WeatherlyHong Kong’s Securities and Futures Commission (SFC) plans to issue more licenses to crypto exchanges and digital asset firms by year-end. Its 2024-2026 roadmap focuses on strengthening crypto platform regulations, promoting Real World Asset (RWA) tokenisation, and exploring blockchain technologies further.
KikyoThe SEC warns of a surge in "romance investment scams," where fraudsters pose as romantic partners. The regulatory agency urges caution, especially during World Investor Week, as the FBI reports $5.6 billion lost to crypto scams in 2023.
CatherineBurls Art has created a unique electric guitar that also functions as an aquarium, inspired by AI-generated designs. This innovative project faced engineering challenges, but Burls Art successfully combined art and technology, resulting in a fully playable instrument that also houses aquatic life.
WeatherlySamsung Electronics is facing a significant crisis as its semiconductor division reports disappointing financial results and struggles with competition, leading to a rare public apology from the new leader. The company is dealing with delays in crucial chip deliveries, a drop in share prices, and plans to cut jobs to address its challenges and restore its competitiveness in the market.
AnaisIt is incredible that this may be the first time that people hope that the National Day holiday will pass quickly. The arrival of the National Day holiday has pressed the "pause button" on the recent rising market, and investors are eager to see the A-share market closed.
AlexThe latest trailer for HBO's documentary will reveal the true identity of Satoshi Nakamoto this week. Its producer admitted to confronting the real person in person and believed that Satoshi Nakamoto is still alive. According to betting market data, the market currently speculates that the most likely candidate is Nick Szabo, which coincides with Musk's early theory.
MiyukiThere are reports that USDT, the world's largest dollar stablecoin, may be delisted from the European Coinbase exchange. Tether plans to develop new technical solutions for the European market to comply with the EU's MiCA regulations.
Weiliang