Everything web3, crypto, defi, degen
December 10, 2019 | Security Kraken Security Labs has found a way to extract seeds from a KeepKey cryptocurrency hardware wallet. All that is required is physical access to the wallet for about 15 minutes. Here’s how we did it: This attack relies on voltage glitching to extract your encrypted seed, which can require specialized…
Although much of the original KeepKey codebase is based on the Trezor One, their codebases have diverged. The KeepKey team added several mitigation mechanisms to make the KeepKey firmware resilient to the glitching attacks demonstrated during the Wallet.Fail talk at 35th Chaos Communications Congress; however, these were proven to be ineffective. The specific glitch used…
If you leave digital footprints, (spoiler: you do) then you can be followed. Just because you shut down an account, switched domain names or got a new Twitter handle does not mean that your old tracks disappear. In fact, the footprints you leave online can become critical vulnerabilities. At Kraken Security Labs, we work to…
I couldn’t be more excited to lead security efforts at one of the largest cryptocurrency exchanges on Earth. Kraken is the cryptocurrency market leader in security and our number one priority, above anything else, has always been to protect our clients. We’re announcing some major additions to our product and organization today that will strengthen…
