BlockBeats - Security audit firm OpenZeppelin said in a blog post that it had discovered a "highly serious" vulnerability in Ethereum smartphone wallet Argent that allows hackers to steal money from wallets that don't have specific security features enabled.
OpenZeppelin said the vulnerability exists in wallets that do not have the "monitor feature" activated. The bug has now been fixed and no money has been stolen. The Monitor feature allows a trusted account to perform specific actions on the wallet. The guardian could be a hardware wallet, a MetaMask account, another Ethereum account held by a friend or family member, or a two-factor authentication tool.
OpenZeppelin said at least 329 wallets containing 162 ETH ($37,000) were at risk when the bug was discovered on June 12. An additional 5,513 wallets were detected that did not have monitoring enabled, but Argent said most of those wallets were inactive.
Argent quickly fixed the bug and user money is now secure, OpenZeppelin said. Argent contacted affected users the day after the problem was discovered on June 12, and on June 19, Argent fixed and updated the compromised smart contract and released a new version of the wallet.
The original address: https://decrypt.co/33009/bug-discovered-in-argent-ethereum-wallet
Welcome to join the official BlockBeats community:
Telegram Subscription Group: https://t.me/theblockbeats
Telegram Discussion Group: https://t.me/BlockBeats_App
Official Twitter Account: https://twitter.com/BlockBeatsAsia