Oops: South Korean cops lost $5M in seized crypto after leaking wallet password
摘要
韩国警方在发布新闻稿炫耀从124名富有的逃税者处查获价值560万美元的加密货币后，很快发现因错误上传了包含敏感信息的图片，导致大部分资产被盗。图片中清晰显示了冷钱包旁的完整助记词恢复短语，任何人无需额外密码或授权即可转移资产。尽管新闻稿随后被撤下，但相关信息已被多家媒体获取并报道。
Soon after South Korean police posted a press release boasting about seizing $5.6 million worth of cryptocurrency from 124 wealthy tax evaders, cops realized that they had mistakenly posted images that made it possible for a thief to quickly steal most of the seized assets.
Eventually, the press release was removed, but not before it was grabbed by local media outlets and tech publications covering the theft.
Bleeping Computer shared a screenshot of the retracted images, which showed a handwritten note next to a Ledger device that's used as a so-called "cold wallet" to store crypto out of reach of online threats. Clearly legible in the photo, the note contained a complete mnemonic recovery phrase that anyone can use as a master key to move assets off the cold wallet to a new wallet without any additional PIN or permissions required.
转载信息
评论 (4)
