Coinspect Security

@coinspect

You Build. We Defend. Since 2014 protecting critical decentralized systems: L1 nodes, smart contracts audits, wallets, web3 dApps, exchanges, bridges.

coinspect.com

Joined July 2014

Replies Reposts Media Articles

Coinspect Security
@coinspect
5h
1/ We've been making steady progress on DappFence. The goal is simple but ambitious: dApp users shouldn’t have to blindly trust whatever content and code intermediate providers serve. The browser should be able to verify that the frontend is authentic.
1
Coinspect Security
@coinspect
Sep 18
1/ Wallet teams: Your users can switch wallets and carry the a vulnerability with them. If a mnemonic was generated by a broken PRNG, importing it into a new wallet does not make it safe. That’s the problem Unlukey is built to solve.
4
Coinspect Security
@coinspect
Sep 16
Wallet teams: what are you waiting for? Unlukey gives defenders a real advantage: the chance to identify weak wallets before attackers do.
Coinspect Security
@coinspect
Sep 15
We simplified Unlukey. Instead of precomputing billions of addresses (BIP39) from weak seed-generation vulnerabilities, we want wallets to detect weak entropy directly. Unlukey provides the research + datasets. We’re looking for wallet teams interested in integrating.
Coinspect Security
@coinspect
Sep 16
If wallets collaborate, we can get ahead of attackers and warn users affected by weak wallet-generation bugs. Simple: Unlukey does the research and distributes datasets of known weak pre-BIP39 entropy output for wallets to check locally.
Coinspect Security
@coinspect
Sep 15
Unlukey now has a public repository and client SDK: github.com/coinspect/unlu… The goal is simple: make detection of known weak seeds something wallets can add with one integration.
Coinspect Security
@coinspect
Sep 15
Unlukey now has a public repository and client SDK: github.com/coinspect/unlu… The goal is simple: make detection of known weak seeds something wallets can add with one integration.
Coinspect Security
@coinspect
Sep 15
Researching weak wallet generation incidents we found that even when we could identify affected addresses, we had no way to warn the users who were using them. Unlukey turns each known weak generation code into datasets that wallets can use to identify and warn users:
2