Cointime

Download App
iOS & Android

SlowMist Cosine: Privy wallet users need to enable 2FA to prevent the risk of asset theft

SlowMist Cosmos pointed out in an X article that there are potential security risks with the Privy wallet solution. Although Privy uses the SSS scheme to generate and manage users' sharded private keys, the plaintext private key will eventually be restored in the independent iframe context of the target frontend. If the user does not enable 2FA, there may be a risk of all assets in the wallet being stolen with one click.

Comments

All Comments

Recommended for you