U.S. Cyber Authorities Investigate Binance Trust Wallet iOS App for Vulnerabilities
Summary
The National Institute of Standards and Technology (NIST) has identified a potential vulnerability in the iOS version of Binance's Trust Wallet. The flaw, which is listed in the CVE database, has reportedly been exploited, allowing attackers to guess security words and steal money from digital wallets. The issue stems from the way the wallet uses the trezor-crypto library. In 2023, Trust Wallet experienced multiple cyber incidents resulting in over $4 million in losses. Binance, which acquired Trust Wallet in 2018, has since launched its own Web3 wallet. Neither Binance nor Trust Wallet have commented on the vulnerability.
