{"id":1169881,"date":"2022-08-07T22:36:45","date_gmt":"2022-08-07T22:36:45","guid":{"rendered":"https:\/\/www.ghanamma.com\/2022\/08\/07\/theres-always-another-nightmarish-crypto-hack-around-the-corner\/"},"modified":"2022-08-07T22:36:45","modified_gmt":"2022-08-07T22:36:45","slug":"theres-always-another-nightmarish-crypto-hack-around-the-corner","status":"publish","type":"post","link":"https:\/\/www.ghanamma.com\/2022\/08\/07\/theres-always-another-nightmarish-crypto-hack-around-the-corner\/","title":{"rendered":"There\u2019s always another nightmarish crypto hack around the corner \u2013"},"content":{"rendered":"<p><\/p>\n<div>\n<p id=\"speakable-summary\">Welcome back to<strong> Chain Reaction.<\/strong><\/p>\n<p>Last week, we looked at the near-term future for crypto gaming as VCs zero in on where to place consumer bets. This week, we\u2019re looking at hardware wallets and the endless journey towards feeling safe in the crypto world.<\/p>\n<p>To get this in your inbox every Thursday, you can subscribe on \u2019s newsletter page.<\/p>\n<hr\/>\n<h2>nowhere to hide<\/h2>\n<p><em>A weekly dispatch from the desk of  crypto editor <a href=\"https:\/\/twitter.com\/lucasmtny\">Lucas Matney<\/a>:<\/em><\/p>\n<p>The world of crypto can be a cruel and unforgiving place, and while VCs and crypto hedge funds have been happy to bail out institutions, sometimes consumers dabbling in the space find themselves left out in the cold. This week, a couple of pretty high profile hacks cost crypto investors millions, but it was the smaller, more mysterious one that likely left newbie buyers clutching their private keys and praying for the best.<\/p>\n<p>Putting money anywhere is an exercise of trust, which sometimes makes it funny that the the word \u201ctrustless\u201d has been a leading phrase in crypto religious creeds that investors use to gain converts. All a user must do is hold their private key near and dear and they can trust that their money will always be there without having to place any trust in a traditional financial institution. But consumers are discovering some of the long-known fine print to that promise.<\/p>\n<p>This week, thousands of Solana users logged into their crypto wallet apps to discover that all of their funds had disappeared. Many of these users claimed they hadn\u2019t used the wallets in weeks or months, ruling out some sort of mass signature of a malicious contract. While this ended up being a lowly seven-figure hack, the mystery was notable. Early-on, users weren\u2019t sure whether this was an attack on the underlying Solana network or an underlying service provider that multiple wallets relied on. Amid all the confusion, wallets continued to be drained eventually emptying the contents of upwards of 8,000 individual accounts.<\/p>\n<p>Investors in the Solana ecosystem (the network\u2019s founder dropped some choice Twitter <a href=\"https:\/\/twitter.com\/solanaspaces\/status\/1554991673020743680?s=20&amp;t=S4HNhfoU5TCLRZ_OTrkSOw\">retweets<\/a>) complained that the media was focusing more heavily on the single-digit millions exploit when the Nomad bridge had been hacked for $190 million just a day prior. But it was the nature of the attack that was scarier than the dollar amount.<\/p>\n<div class=\"embed breakout\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Apparently a crypto wallet provider was inadvertently logging seed phrases to their event logging server, which lead to someone being able to hack and drain over 8,000 wallets \ud83d\ude2c https:\/\/t.co\/Mah695gQY5<\/p>\n<p>\u2014 Marcus Hutchins (@MalwareTechBlog) <a href=\"https:\/\/twitter.com\/MalwareTechBlog\/status\/1554978710301712384?ref_src=twsrc%5Etfw\">August 3, 2022<\/a><\/p>\n<\/blockquote>\n<\/div>\n<p>While users across wallets reported the problem, the issue came down to a vulnerability in the Slope wallet which had\u2013 unbeknownst to users \u2014 been logging their private keys in the backend, leaving them vulnerable to bad actors if they had ever imported keys to the mobile app. This saga probably served as another severing point of trust in the system for new users who might have thought their funds were safer in a wallet than a centralized exchange\u2019s coffers. But long-time crypto users shrugged and signified that this was yet another reason for users to <a href=\"https:\/\/twitter.com\/SolanaLegend\/status\/1554632081669558273?s=20&amp;t=S4HNhfoU5TCLRZ_OTrkSOw\">hold their funds<\/a> in so-called hardware wallets \u2014 physical devices which store a user\u2019s private keys and dramatically cut down on the number of attack vectors for hackers outside of human error.<\/p>\n<p>Now, pushing every new user to buy a ~$100 hardware wallet in order to truly secure their assets clearly isn\u2019t the ticket to widespread near-term adoption and yet it seems to be a rule that those deepest in the space still cling to. While plenty of crypto\u2019s richest are holding to strategies that promote security above most anything else, it also seems that plenty of them are investing and promoting projects which emphasize speed and seamless onboarding at the expense of security. Users finding their way onto the rails of flashy consumer apps may find themselves realizing that crypto\u2019s early onboarding hurdles have been steep for a reason and that wealthy users buying air-gapped computers and keeping their keys on piece of papers have plenty of history framing their paranoia.<\/p>\n<hr\/>\n<h2>the latest pod<\/h2>\n<p><span style=\"font-weight: 400;\">Chain Reaction is back again this week and better than ever! We announced two big changes to the pod this week. First and foremost, we have a new co-host, <\/span><a href=\"https:\/\/twitter.com\/jacqmelinek\"><span style=\"font-weight: 400;\">Jacquie Melinek<\/span><\/a><span style=\"font-weight: 400;\">, joining us weekly to talk about the biggest headlines in web3. Jacquie is a great friend of ours and as a <\/span><span style=\"font-weight: 400;\">reporter for +<\/span><span style=\"font-weight: 400;\">, she\u2019s eager to get in the weeds to us help demystify all things crypto.\u00a0<\/span><\/p>\n<p><iframe loading=\"lazy\" src=\"https:\/\/player.simplecast.com\/2d1dd059-056f-4028-a36c-0182bc76a3da?dark=false\" width=\"100%\" height=\"200px\" frameborder=\"no\" scrolling=\"no\" seamless=\"\"><\/iframe><\/p>\n<p><span style=\"font-weight: 400;\">Second, we\u2019re splitting our weekly show into two separate episodes: a weekly news segment feat. Jacquie, the first of which came out today, and an interview segment hosted by Anita and Lucas. Stay tuned for the latest interview episode to drop next week, in which we talked to Uniswap COO MC Lader.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For this week\u2019s news, we unpacked two <\/span><span style=\"font-weight: 400;\">high-profile hacks<\/span><span style=\"font-weight: 400;\"> that happened in the first two days of the month (phew). We also discussed <\/span><span style=\"font-weight: 400;\">Robinhood\u2019s latest round of layoffs<\/span><span style=\"font-weight: 400;\"> and a $30 million fine the company paid to New York regulators.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Subscribe to Chain Reaction on <\/span><span style=\"font-weight: 400;\">Apple<\/span><span style=\"font-weight: 400;\">, <\/span><span style=\"font-weight: 400;\">Spotify<\/span><span style=\"font-weight: 400;\"> or your alternative podcast platform of choice to keep up with us every week.<\/span><\/p>\n<hr\/>\n<h2>follow the money<\/h2>\n<p><i><span style=\"font-weight: 400;\">Where startup money is moving in the crypto world:<\/span><\/i><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">AO Labs<\/span><span style=\"font-weight: 400;\"> raised $4.5 million from investors including Balaji Srinivasan and Sandeep Nailwal for its Spacebar web3 gaming platform.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">\u201cGreen\u201d web3 platform <\/span><span style=\"font-weight: 400;\">OneOf<\/span><span style=\"font-weight: 400;\"> closed an $8 million-plus strategic round from investors including Amex Ventures.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Digital asset derivatives company <\/span><span style=\"font-weight: 400;\">OrBit<\/span><span style=\"font-weight: 400;\"> raised $4.6 million from Matrixport, Brevan Howard and others.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Crypto credit protocol <\/span><span style=\"font-weight: 400;\">Debt DAO<\/span><span style=\"font-weight: 400;\"> snagged $3.5 million for its seed round led by Dragonfly Capital.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Center<\/span><span style=\"font-weight: 400;\">, a crypto infrastructure startup, raised $11 million in a seed round from investors including Thrive Capital, Founders Fund and Volt Capital.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Gary Vaynerchuk\u2019s NFT project, <\/span><span style=\"font-weight: 400;\">VeeFriends<\/span><span style=\"font-weight: 400;\">, scored $50 million in an a16z-led financing.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Quasar<\/span><span style=\"font-weight: 400;\">, a Cosmos-based DeFi protocol, raised $6 millon in seed capital from Polychain, Blockchain Capital and others.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Stadium Live<\/span><span style=\"font-weight: 400;\">, a fantasy sports metaverse startup, nabbed $10 million for its Series A from KB Partners, Union Square Ventures, Dapper Labs and others.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Decentralized data warehouse provider <\/span><span style=\"font-weight: 400;\">Space and Time<\/span><span style=\"font-weight: 400;\"> bagged $10 million for its seed round from investors including Framework Ventures and Digital Currency Group.<\/span><\/li>\n<li style=\"font-weight: 400;\">Play-to-earn fitness app Sweatcoin<span style=\"font-weight: 400;\"> completed a $13 million fundraise, including a private token sale, from investors including Electric Capital and Jump Crypto.<\/span><\/li>\n<\/ol>\n<hr\/>\n<h2>the week in web3<\/h2>\n<p><i><span style=\"font-weight: 400;\">A weekly window into the thoughts of web3 reporter <\/span><\/i><a href=\"https:\/\/twitter.com\/AnitaRamaswamy\"><i><span style=\"font-weight: 400;\">Anita Ramaswamy<\/span><\/i><\/a><i><span style=\"font-weight: 400;\">:<\/span><\/i><\/p>\n<p><span style=\"font-weight: 400;\">It seems like a good time to talk about security in crypto in light of the recent hacks affecting both the Nomad crypto bridge and the Solana ecosystem. It\u2019s becoming increasingly clear that no matter how many assurances a crypto company makes about how airtight its security standards are, investors should be watching their backs at all times. The pain can be even more acute for NFT holders, who are at risk of losing millions of dollars of value in one fell swoop if one of their pricey JPEGs gets stolen \u2013 just think back to what happened to actor Seth Green and his kidnapped Bored Ape.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">There are a few different options for how people can store their crypto securely today, and they all have their tradeoffs. A \u201chot wallet\u201d is connected to the internet, which leaves it vulnerable to outages or connectivity troubles. Furthermore, plenty of hot wallets are operated by centralized entities such as exchanges that hold users\u2019 keys on their behalf \u2013 a transfer of power many crypto users are loathe to grant. A \u201ccold wallet,\u201d meanwhile, is considered far more secure, but involves clunky, hard-to-use hardware that could be misplaced just as easily as a \u201cseed phrase,\u201d which is a password used to unlock a crypto wallet.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Upstream founder and CEO Alex Taub, <\/span><span style=\"font-weight: 400;\">who we had on last week\u2019s pod<\/span><span style=\"font-weight: 400;\">, says his startup has a user-friendly solution that allows people to keep control of their own keys digitally without having to compromise on security. It\u2019s a unique solution coming at a particularly opportune moment. For details on how it works and why it\u2019s different from what\u2019s already on the market, check out my article <\/span><span style=\"font-weight: 400;\">here<\/span><span style=\"font-weight: 400;\">.\u00a0<\/span><\/p>\n<hr\/>\n<h2>TC+ analysis<\/h2>\n<p><em>Here\u2019s some of this week\u2019s crypto analysis available on our subscription service TC+ from senior reporter <a href=\"https:\/\/twitter.com\/jacqmelinek\">Jacquelyn Melinek<\/a>:\u00a0<\/em><\/p>\n<p><strong>Solana\u2019s speedy approach to crypto is attracting developers, despite hiccups <\/strong><br \/><span style=\"font-size: 1rem; letter-spacing: -0.1px;\">Although the crypto market isn\u2019t always sunshine and flowers, some prominent industry players, including Solana co-founder Raj Gokal, still have an optimistic outlook for growth \u2014 at least about their own projects. Despite Solana\u2019s recent issues with 8,000 wallets hacked on Tuesday, the layer-1 blockchain has about 15 million to 20 million monthly active addresses, some of the highest in the crypto industry, Gokal said. \u201cA question we get a lot is how is the market affecting the pace of development and the pace of building?\u201d His answer? It\u2019s not, really.<\/span><\/p>\n<p><strong>Why education is key to halting hacks like the $190M Nomad exploit <\/strong><br \/><span style=\"font-size: 1rem; letter-spacing: -0.1px;\">Following the loss of almost $200 million in a security exploit on crypto protocol Nomad, security experts insisted that more education and security protocols are necessary for protecting web3 communities from hackers. As the crypto ecosystem becomes larger over time, interchain operability will continue to grow, too, \u201cat profound levels with a focus on security and decentralization,\u201d Daniel Keller, co-founder at Flux, said to . \u201cHowever, attention needs to be given to security and not only speed of development as we push DeFi products to the masses.\u201d<\/span><\/p>\n<p><strong>Tiffany and Gucci\u2019s dip into crypto is a balance of reputation and revenue <\/strong><br \/><span style=\"font-weight: 400;\">Are crypto integrations by household name brands and sports teams evidence of increasing use cases for digital assets and cryptocurrencies \u2014 or more of a marketing ploy? This week, Tiffany &amp; Co., Gucci and FC Barcelona all dove deeper into the crypto sphere with partnerships in the digital asset world. But do these partnerships truly mean anything for the crypto ecosystem? A number of market players shared their thoughts on the financial upside, risk and business play behind these new integrations.\u00a0<\/span><\/p>\n<hr\/>\n<p>Thanks for reading! And \u2014 again \u2014 to get this in your inbox every Thursday, you can subscribe on \u2019s newsletter page.<\/p>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome back to Chain Reaction. Last week, we looked at the near-term future for crypto gaming as VCs zero in on where to place consumer bets. This week, we\u2019re looking at hardware wallets and the endless journey towards feeling safe in the crypto world. To get this in your inbox every Thursday, you can subscribe [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1169883,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1169881","post","type-post","status-publish","format-standard","has-post-thumbnail","category-celebrity-gossip"],"_links":{"self":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/posts\/1169881","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/comments?post=1169881"}],"version-history":[{"count":0,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/posts\/1169881\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/media?parent=1169881"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/categories?post=1169881"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/tags?post=1169881"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}