Connect with us

crypto wallet

SaaS animation platform LottieFiles alerts users to crypto threats

Published

on



LottieFiles revealed a supply chain compromise in which malicious code could lure users into connecting crypto wallets, potentially leading to asset theft.

LottieFiles, a platform that enables designers and developers to create animations, has issued a warning regarding a security breach involving its npm package, which may expose users to malicious code designed to compromise crypto wallets.

In an X post on Oct. 31, LottieFiles said that the affected versions — Lottie Web Player 2.0.5, 2.0.6, and 2.0.7 — were released on Oct. 30, prompting immediate concerns after multiple user reports surfaced about strange code injections. In response to the threat, LottieFiles released a new version, 2.0.8, reverting to the secure code.

“A large number of users using the library via third-party CDNs without a pinned version were automatically served the compromised version as the latest release.”

LottieFiles

For those unable to update, LottieFiles recommends informing end users about potential fraudulent wallet connection prompts associated with the Lottie-player. Users may also opt to remain on version 2.0.4 to avoid risk.

LottieFiles warned that applications using the compromised npm package may inadvertently prompt users to connect their crypto wallets, opening avenues for potential theft. The developer account linked to the malicious uploads has been stripped of access, and related tokens have been revoked to halt any further unauthorized activity, the firm added, though the full extent of the attack remains unknown.





Source link

crypto wallet

Phantom acquires Blowfish to boost wallet security

Published

on



Phantom, the non-custodial crypto wallet for decentralized finance and non-fungible tokens on Solana, has announced its acquisition of web3 security platform Blowfish.

The Solana (SOL) based cryptocurrency wallet disclosed the transaction on Nov. 19, noting in a blog post that the move aims to bolster security for wallet users. Blowfish’s team, known for protecting users and assets by alerting against scams and fraud, will join Phantom.

According to Phantom, acquiring Blowfish is a key step in combating harmful decentralized applications and bugs. The wallet has recently faced downtime and a buggy update, which affected user experience and safety.

Commenting on Blowfish’s role in enhancing user security, Phantom chief executive officer Brandon Millman stated:

“With their help, we’re going to offer the most secure and user-friendly platform to access, and interact with, apps, tokens, and collectibles across all devices.”

Blowfish has reportedly prevented over 2.8 million scams and scanned more than 1.3 billion transactions, securing assets worth over $18 billion. This capability will now be integrated into Phantom, with Blowfish’s current service being sunset.

In June this year, a fake Phantom wallet pushed on the Apple App Store saw unsuspecting users lose assets.

On Nov. 13, a buggy update caused some iOS users to be locked out of their accounts. The glitch introduced a bug that reset wallets and added a prompt for users to log in again with their recovery phrases. Several users reported losing funds, including one who claimed a $600,000 loss.

It’s important to note that Phantom is a non-custodial wallet and does not access user funds or store recovery phrases.

Separately, digital asset custody and wallet infrastructure platform Fireblocks recently launched a non-custodial wallet-as-a-service solution aimed at advancing security for user assets across the industry.



Source link

Continue Reading

24/7 Cryptocurrency News

Standard Chartered-Backed Zodia Custody Launches Wallet, Partners Galaxy Digital

Published

on


Zodia Custody, a leading digital asset custodian backed by Standard Chartered, has launched its latest product, Unified Wallets today. The product focuses on boosting operational efficiency for institutional clients. Notably, this move comes as the firm partners with Galaxy Digital to expand its custody solutions.

Meanwhile, the new wallet feature allows institutions to pool assets and streamline transactions without compromising security, making it a game-changer for digital asset managers.

Standard Chartered Backed Zodia Custody Launches Wallet

Zodia Custody’s Unified Wallets offer a significant leap in digital asset management. The new solution allows institutions and fund managers to pool funds from various clients into individual wallets, simplifying transaction processing.

Notably, this innovation reduces costs, ensures smooth transfers, and enhances operational efficiency for businesses dealing with digital assets. By partnering with financial institutions like Galaxy Digital, the firm positions itself as a leader in the institutional digital asset space.

Meanwhile, the Unified Wallets system allows businesses to track deposits in real time and quickly withdraw assets from a cold wallet, all without sacrificing control or security. Zodia’s CEO Julian Sawyer emphasized this, stating that Unified Wallets combine the flexibility of omnibus wallets with the security of segregated assets, making it ideal for optimizing operations in the digital asset sector.

It’s worth noting that Galaxy Digital is the first to implement this feature, marking a milestone in Zodia Custody’s expansion into more sophisticated digital asset management. Andrew Taubman, Deputy Chief Operations Officer at Galaxy, praised the partnership, noting that the firm’s approach enhances their trading operations while maintaining top-tier security.

Strengthening Partnership With Galaxy Digital

Zodia Custody’s partnership with Galaxy Digital showcases its dedication to delivering secure and scalable solutions for institutional investors. As institutional engagement with digital assets grows, custodians like the firm need to offer solutions that balance operational efficiency with strong security measures.

The company’s clients like Galaxy, can now enjoy the benefits of the Unified Wallets alongside Zodia’s other offerings, such as the unique Interchange service. This feature allows sophisticated investors to choose their preferred trading venues while benefiting from off-venue settlement for market makers and OTC desks.

In addition, this enhances the flexibility of trading and settlement processes, providing clients with more control over their assets. Sawyer believes the growing adoption of Zodia Custody’s solutions reflects the strength of the platform. Besides, it also gained notable traction as investors often look for the top crypto wallets to safely keep their holdings.

He stressed that the company’s products are designed to meet the unique needs of digital asset businesses, providing the flexibility, security, and operational ease that today’s institutional investors demand.

✓ Share:

Rupam Roy

Rupam is a seasoned professional with three years of experience in the financial market, where he has developed a reputation as a meticulous research analyst and insightful journalist. He thrives on exploring the dynamic nuances of the financial landscape. Currently serving as a sub-editor at Coingape, Rupam’s expertise extends beyond conventional boundaries. His role involves breaking stories, analyzing AI-related developments, providing real-time updates on the crypto market, and presenting insightful economic news.
Rupam’s career is characterized by a deep passion for unraveling the complexities of finance and delivering impactful stories that resonate with a diverse audience.

Disclaimer: The presented content may include the personal opinion of the author and is subject to market condition. Do your market research before investing in cryptocurrencies. The author or the publication does not hold any responsibility for your personal financial loss.





Source link

Continue Reading

crypto wallet

Paycoin to end wallet services in South Korea

Published

on



PayProtocol AG, the issuer of Paycoin, announced plans to terminate its virtual asset custody service for the Paycoin app in South Korea. 

This decision stems from challenges in the domestic regulatory environment, which have prevented PCI’s payment services from resuming since February 2023.

The company has decided not to renew its Virtual Asset Service Provider registration when it expires in April 2025, opting instead to focus on its growing international payment ecosystem.

In July, South Korean authorities considered delaying the 20% crypto gains tax until 2028, following concerns from the local crypto community. The delay was discussed due to fears of market impact and insufficient institutional preparation.

Paycoin’s international ventures

Paycoin has made strides abroad, launching a global app that allows PCI payments at international retailers like Apple, Shake Shack, and Swarovski. 

The company also established a presence in Lithuania and secured VASP status to expand in crypto-friendly jurisdictions.

Paycoin’s decision to discontinue its VASP registration reflects a shift in focus from South Korea to international markets, as ongoing regulatory ambiguity in the country hinders operations. While domestic wallet services will cease, other features such as Wallet Connect and Paycoin Shopping will remain available, according to the Paycoin release.

Withdrawals for PCI and other assets will be supported until April 21, 2025, while new wallet creation and deposits will end on Sept. 27, 2024.



Source link

Continue Reading
Advertisement [ethereumads]

Trending

    wpChatIcon