Security

MyDashWallet Was Compromised For Two Months

MyDashWallet.com was hacked between May 13th-July 12th. MyDashWallet was modified to load an external script from the script from external servers, which leaked private keys of MyDashWallet’s users.

The hacker(s) was able to obtain all users’ private keys that were used between May 13th and July 12th. The hack itself was only active for two months before being detected. The insecure coding practice implemented by MyDashWallet went undetected for over a year due to insufficient review of code by third parties.

Anyone using MyDashWallet.com during that time should assume their private keys are known by the hacker and immediately move balances out of that wallet. As some users have reported stolen crypto from their wallets. Keep your crypto safe.

A screenshot taken today from Dash.org Community Forum. A user is complaining about missing funds from his wallet after using MyDashWallet
MNabilAli

M. Ali

Author

Daily cryptocurrency trader, miner, technology enthusiast and a full time IT and security consultant. If you have any questions or comments please feel free to email him at nabil@wibbic.com