Algorand Wallets Hacked Again

Algorand-based wallets have been hit by security breaches in recent weeks, with MyAlgo and Algodex both experiencing hacks. MyAlgo urged users to withdraw their assets or rekey their funds after a February security breach that resulted in losses of around $9.2 million. In the past week, a targeted attack was carried out against a group of high-profile MyAlgo accounts. The cause of the breach is unknown, and the wallet provider has encouraged users to take precautionary measures to protect their assets. Meanwhile, Algodex revealed that a malicious actor infiltrated a company wallet on March 5, similar to what is happening in the Algorand ecosystem. Algodex moved the bulk of its USD Coin (USDC) and native Algodex (ALGX) tokens to secure locations, but the infiltrated wallet was responsible for providing extra liquidity to the ALGX token. The exchange confirmed that $25,000 in ALGX tokens allocated to provide liquidity rewards were taken, but it would replace this in full. The total loss from the theft was less than $55,000, and Algodex users and the liquidity of ALGX were not affected.

The Algorand Foundation’s chief technology officer, John Wood, confirmed that around 25 accounts were affected by the MyAlgo exploit, and it was not the result of an underlying issue with the Algorand protocol or software development kit (SDK). The foundation is responsible for the development and governance of the Algorand ecosystem, which aims to create a secure and decentralized platform for digital assets and applications. Algorand uses a pure proof-of-stake consensus algorithm that is designed to be energy-efficient and secure against attacks. The protocol has been adopted by a range of projects and companies in the blockchain space, including Circle, the issuer of USDC stablecoin, and the International Blockchain Monetary Reserve, a non-profit organization that aims to provide financial services to underserved communities.

The recent hacks on Algorand-based wallets highlight the importance of securing digital assets and using trusted and reputable service providers. Users should also be aware of the risks associated with storing assets on centralized platforms, which can be vulnerable to attacks and hacks. The Algorand Foundation has been working on enhancing the security of the protocol and its ecosystem by partnering with leading security firms and auditing companies. The foundation also offers grants and support to developers and projects building on the Algorand platform, with a focus on security, scalability, and usability. The foundation’s latest initiative is the Algorand Improvement Proposal (AIP) process, which allows stakeholders and developers to propose and discuss changes to the protocol and its governance. The AIP process is designed to be transparent, collaborative, and community-driven, ensuring that the Algorand ecosystem evolves in a responsible and inclusive way.

In addition to the Algorand Foundation’s efforts, users can take several measures to protect their digital assets and minimize the risks of hacks and breaches. One of the most important steps is to use strong and unique passwords for each account and to enable two-factor authentication (2FA) whenever possible. Users should also avoid sharing sensitive information online or with unknown parties, and to verify the authenticity of emails, messages, and websites before providing any information or making any transactions. Another best practice is to store digital assets in hardware wallets, which are offline devices that offer enhanced security and privacy compared to software wallets and exchanges.

As the adoption of blockchain and digital assets continues to grow, the security and resilience of the underlying infrastructure become even more critical. Algorand and other blockchain platforms must continue to invest in research, development, and education to address the evolving threats and challenges in the digital asset space. Users and stakeholders also have a role to play in promoting best practices, transparency, and accountability in the ecosystem, ensuring that the benefits of blockchain technology are realized in a safe and sustainable way.


Tagged : / / / / /

MyAlgo warns users of ongoing wallet exploit

MyAlgo, a popular wallet provider for the Algorand (ALGO) network, has issued a warning to its users amid an ongoing exploit that has resulted in the theft of an estimated $9.2 million worth of funds. The company has advised users to withdraw funds from any wallets created with a seed phrase due to the vulnerability of such wallets to the exploit. While the company is uncertain about the cause of the recent wallet hacks, it has encouraged everyone to take precautionary measures to protect their assets.

According to a tweet by MyAlgo, a targeted attack was carried out against a group of high-profile MyAlgo accounts, which has seemingly been conducted over the past week. The self-titled “on-chain sleuth,” ZachXBT, has outlined in a tweet that the exploit has pilfered over $9.2 million, with crypto exchange ChangeNOW able to freeze around $1.5 million worth of funds.

The exploit primarily affects users who had mnemonic wallets with the key stored in an internet browser, according to MyAlgo. A mnemonic wallet typically uses between 12 and 24 words to generate a private key. The vulnerability of such wallets to the exploit has been highlighted by the Algorand-focused developer collective, which released a report that eliminated multiple possible exploit vectors such as malware or operating system vulnerabilities. The report determined the “most probable” scenarios were that the affected users’ seed phrases were compromised through socially engineered phishing attacks or MyAlgo’s website was compromised, leading to the “targeted exfiltration of unencrypted private keys.”

John Wood, chief technology officer at the Algorand Foundation, has confirmed that around 25 accounts were affected by the exploit. He added that the exploit “is not the result of an underlying issue with the Algorand protocol” or its software development kit.

MyAlgo has stated that it will continue to work with authorities and conduct a thorough investigation to determine the root cause of the attack. The company has advised its users to take precautionary measures and to withdraw funds from wallets created with a seed phrase.

In conclusion, the ongoing exploit has resulted in the theft of millions of dollars worth of funds from the Algorand network. The vulnerability of mnemonic wallets with the key stored in an internet browser has been highlighted, and users are advised to take precautionary measures to protect their assets. MyAlgo and other relevant authorities are working to investigate the attack and determine its root cause to prevent future incidents.


Tagged : / / / / /
Bitcoin (BTC) $ 26,617.13 2.12%
Ethereum (ETH) $ 1,585.12 2.73%
Litecoin (LTC) $ 64.57 0.36%
Bitcoin Cash (BCH) $ 207.57 3.79%