An announcement to Trinity Wallet users was posted to Reddit regarding the security of their seeds in IOTA’s hot wallet mobile and desktop application. The post calls out to users who had opened the Trinity Wallet from December 17, 2019 to February 17, 2020 that their tokens may be at risk of being stolen. In response to the threat, IOTA released a Seed Migration Tool for users to safely transfer their funds onto a new seed. The migration period started on February 29, 2020 and will end on March 7, 2020.

Edit, updated 3/9/2020: David Sønstebø, the founder of Iota, has confirmed that he will personally reimburse all stolen MIOTA tokens to the victims of the hack. The payback is valued at roughly $1.97 million.

Hot Wallets vs. Cold Storage

In the never ending comparison between hot wallets and cold storage, it is events like these where cold storage will come out on top in terms of security. Many crypto investors prefer hot wallets for their convenience and hassle-free design, however, it comes with the sacrifice of security. On the other hand, cold storage keeps your seeds and keys on a non-hackable hardware device that is kept away from your mobile or desktop. Therefore, making seed theft a lot more cumbersome for thieves and scam artists.

Hardware wallets do come with some caveats though. When compared to hot wallets, token exchanges and transfers do require extra steps to complete them. Many popular hardware wallets, including Trezor and Ledger, rely on USB connections to a computer in order to make transactions. USB connections do also carry some hefty baggage, especially in 2020. If your computer does not have the compatible USB ports built-in, you may also have to worry about adapters and dongles.

CoolWallet S - The Best of Both Worlds

The CoolWallet S, from CoolBitX, combines the convenience of hot wallets and the security of cold storage into one device. The revolutionary credit card-sized hardware wallet connects to a smartphone running iOS or Android via an encrypted Bluetooth connection. Once connected, all your crypto balances can be viewed in the provided app. In the app, you can also make transfers and coin-to-coin trades.

Identical to other hardware wallets in the market, the CoolWallet S stores all keys on the card itself. Inside the wallet is a CC EAL5+ certified Secure Element chip that offers military-grade security for your keys. The card is also tamper-proof. This means that the device becomes unusable after being opened or tampered with. To add another layer of security, access to funds is guarded by a 2+1 authentication standard. To access the app, you must first go through your smartphone’s biometric (fingerprint or face) gate. The app can also be password protected. Finally, all transactions happening within the app must be verified with a physical button press on the CoolWallet S.

The main advantage of the CoolWallet S is its mobile and familiar design along with its Bluetooth connection. Making transactions on-the-go without the need for a computer allows for quick and secure transactions.

Latest Stories

すべて見る

Curated Yield: Earn Onchain USDC Yield on CoolWallet
  • by TeamProduct

アクティブ収益戦略:CoolWallet で USDC のオンチェーン収益を得る

CoolWallet の アクティブ収益戦略で、USDC からオンチェーン収益を獲得。Gauntlet がキュレーションするリスク管理戦略 Gauntlet USD Alpha に供給され、自動複利・セルフカストディ・いつでも引き出し可能です。

もっと読むアクティブ収益戦略:CoolWallet で USDC のオンチェーン収益を得るについて

Can Hardware Wallets Be Tampered With? How CoolWallet Fights Hardware Implants
  • by CoolWalletTeam

ハードウェアウォレットも改ざんされる?サプライチェーン攻撃から考えるCoolWalletの不正チップ埋め込み対策

(画像出典: 元Mt. Gox CEOのMark Karpelès氏が公開したLedger Nano Xの分解写真。内部で発見された不正なハードウェアインプラントとみられる部品を示しています。/Mark Karpelès (@MagicalTux) / X)

最近、一部のLedgerユーザーから暗号資産の不正流出が報告され、ハードウェアウォレットのサプライチェーンにおけるセキュリティリスクが注目されています。

公開情報によると、Ledgerは東南アジアの販売代理店CryptoBilisを通じて製品を購入したユーザーの資産流出について調査を進めており、同代理店に対して製品の販売および出荷を一時停止するよう要請しています。

具体的な攻撃手法、被害の範囲、責任の所在については、引き続き調査が必要です。

今回の事例は、重要なセキュリティ上の課題を示しています。

ハードウェアウォレットの安全性は、秘密鍵を保護するセキュアチップだけでなく、製品がユーザーの手元に届くまでに物理的な改ざんを受ける可能性も考慮する必要があります。

もっと読むハードウェアウォレットも改ざんされる?サプライチェーン攻撃から考えるCoolWalletの不正チップ埋め込み対策について

CoolWallet Go Pairing Password: What It Is and Why It Matters
  • by TeamProduct

CoolWallet Go Pairing Password: What It Is and Why It Matters

When you set up a wallet on CoolWallet Go, you create an 8-digit pairing password. You may rarely use it in your day-to-day life, but it plays an important role in keeping your assets safe. Here's what it does and how to keep it safe.

もっと読むCoolWallet Go Pairing Password: What It Is and Why It Mattersについて