SlowMist Cosmos pointed out in an X article that there are potential security risks with the Privy wallet solution. Although Privy uses the SSS scheme to generate and manage users' sharded private keys, the plaintext private key will eventually be restored in the independent iframe context of the target frontend. If the user does not enable 2FA, there may be a risk of all assets in the wallet being stolen with one click.
All Comments