Near Warned About The Threat Of Wallets: Important InformationAdmin
- Near faced the same problem as Solana.
- They discovered a data breach of many users
- Read how to protect your wallet
The Near blockchain has encountered problems similar to the recent story with Solana wallets. The team fixed it, but some users urgently need to change their wallet settings.
On June 6, 2022, NEAR Wallet analysts received a bug report. It follows that confidential information fell into the hands of a third party. The team quickly fixed the issue. And also awarded the specialist who found this leak (user with the nickname @Hacxyk).
The point is the following. When a NEAR Wallet user selects email as the seed recovery method, that seed is sent to a third-party site.
NEAR has no information that the lost data has gone into the hands of hackers. But for security reasons, they forbade clients to use e-mail or SMS to restore their wallets when creating an account. And current users should take security measures.
What should be done
These steps are for customers who have used the email or SMS recovery option in the past.
So, they need to protect their keys. There are 3 options for this:
- Go to wallet.near.org and change the key;
- connect a cold wallet to the address (the safest option);
- enable passphrase protection.
Then the user needs to disable the option to restore by e-mail or SMS.
Recall that Slope wallets were hacked due to key leakage. And the service stored customer seed phrases in plain text on a rented server.