Recent reports have revealed new vulnerabilities within the crypto hardware wallet community involving manipulated transactions. These attacks specifically target individuals who trade with Bitcoin (BTC) fork tokens such as Litecoin (LTC) and Bitcoin Cash (BCH).

The exploit can be found within the app being used to make the transactions by address swapping that can go easily unnoticed by the user. This allowed bad actors to effectively fool their victims into transferring a large amount of highly valued crypto when they originally intended to send that of lower value. In other words, addresses and currency being transferred out of the hardware wallet were manipulated from what the app displayed.

To prevent this happening, the team at CoolWallet S is proud to bring some exciting new updates to both its SE Chip via a firmware update and new security features to the CoolWallet app.

Before updating the firmware on your CoolWallet S, please perform the following steps:

  1. Remove the CoolWallet App from your device. Please also make sure that you have your backup seeds handy.
  2. Go to the Bluetooth settings of your device and remove CoolWallet S from the list.
  3. Reinstall the CoolWallet App from either the App Store or Google Play Store.
  4. Open the app and select your CoolWallet S by serial number and click Reset.
  5. Once the reset is complete, select your CoolWallet S and tap Connect.
  6. Select Recover and enter your backup seeds to retrieve your wallet data.
  7. You may now update your firmware.

CoolWallet S firmware and app updates address security concerns

The SE 101 firmware update for CoolWallet S enables address and token verification on the wallet’s e-ink screen. A new address verification feature has also been added to the app to enable it. Once the firmware and app have been updated, users can now verify transactions on both the app and the CoolWallet S itself. Ultimately, these updates will put a stop to any address or coin manipulation.

Transactions being made with coins that are natively supported on CoolWallet S will be displayed with their respective logos. However, transactions made with other coins will be verified in two displays: the native coin being used to sign the transaction and then the actual coin being transferred.

CoolWallet S: What's new in firmware update

Let's take a look at how it all looks. In this example, we’ll be sending 40 USDT that will be signed on the Ethereum (ETH) blockchain.

In the app, the currency, amount and address will be displayed. Once address verification is enabled, the app will ask you to verify the transaction on the card.

On the CoolWallet S, the “ETH” symbol will display indicating that the Ethereum blockchain will be used to sign the transaction.

Shortly after, the “USDT” symbol will display to indicate that the transaction will be in USDT.

The amount of USDT to be transferred will then be displayed.

If everything is correct, you may press the button to verify the transaction.

You may refer to the table below to see what currencies CoolWallet S currently supports and their transaction authorization information.

Transaction Page 1 Page 2 Page 3
1 Stellar XLM N/A Transaction Amount
2 Kinesis KAU XLM KAU Transaction Amount
3 Kinesis KAG XLM KAG Transaction Amount
4 Bitcoin BTC N/A Transaction Amount
5 USDT Omni BTC USDT Transaction Amount
6 Binance BNB BNB N/A Transaction Amount
7 BUSD BNB BUSD Transaction Amount
8 ERC20 Tokens ETH Transaction Amount
9 Litecoin LTC N/A Transaction Amount
10 XRP XRP N/A Transaction Amount
11 Bitcoin Cash BCH N/A Transaction Amount
12 Icon ICX N/A Transaction Amount
13 Zen ZEN N/A Transaction Amount
14 Ether ETH N/A Transaction Amount

If you have any other questions about the firmware and app updates and/or you are having trouble updating, please feel free to contact our support page at anytime.

Latest Stories

すべて見る

Curated Yield: Earn Onchain USDC Yield on CoolWallet
  • by TeamProduct

アクティブ収益戦略:CoolWallet で USDC のオンチェーン収益を得る

CoolWallet の アクティブ収益戦略で、USDC からオンチェーン収益を獲得。Gauntlet がキュレーションするリスク管理戦略 Gauntlet USD Alpha に供給され、自動複利・セルフカストディ・いつでも引き出し可能です。

もっと読むアクティブ収益戦略:CoolWallet で USDC のオンチェーン収益を得るについて

Can Hardware Wallets Be Tampered With? How CoolWallet Fights Hardware Implants
  • by CoolWalletTeam

ハードウェアウォレットも改ざんされる?サプライチェーン攻撃から考えるCoolWalletの不正チップ埋め込み対策

(画像出典: 元Mt. Gox CEOのMark Karpelès氏が公開したLedger Nano Xの分解写真。内部で発見された不正なハードウェアインプラントとみられる部品を示しています。/Mark Karpelès (@MagicalTux) / X)

最近、一部のLedgerユーザーから暗号資産の不正流出が報告され、ハードウェアウォレットのサプライチェーンにおけるセキュリティリスクが注目されています。

公開情報によると、Ledgerは東南アジアの販売代理店CryptoBilisを通じて製品を購入したユーザーの資産流出について調査を進めており、同代理店に対して製品の販売および出荷を一時停止するよう要請しています。

具体的な攻撃手法、被害の範囲、責任の所在については、引き続き調査が必要です。

今回の事例は、重要なセキュリティ上の課題を示しています。

ハードウェアウォレットの安全性は、秘密鍵を保護するセキュアチップだけでなく、製品がユーザーの手元に届くまでに物理的な改ざんを受ける可能性も考慮する必要があります。

もっと読むハードウェアウォレットも改ざんされる?サプライチェーン攻撃から考えるCoolWalletの不正チップ埋め込み対策について

CoolWallet Go Pairing Password: What It Is and Why It Matters
  • by TeamProduct

CoolWallet Go Pairing Password: What It Is and Why It Matters

When you set up a wallet on CoolWallet Go, you create an 8-digit pairing password. You may rarely use it in your day-to-day life, but it plays an important role in keeping your assets safe. Here's what it does and how to keep it safe.

もっと読むCoolWallet Go Pairing Password: What It Is and Why It Mattersについて