According to PR Newswire, the team at ZenGo wallet has become aware of a major bug that can potentially allow cyber criminals to steal crypto from major wallets: BigSpender.
The bug works by using the "replace-by-fee" (RBF) feature, in which an unconfirmed crypto transfer can be swapped with a transaction with a higher fee to speed up the process.
The feature was initially introduced to wallets as a way of avoiding time-consuming confirmations by paying a higher fee.
Now, the article states, hackers can steal crypto from wallets by sending a transaction with a low fee, which will definitely not be confirmed, and then using RBF to push the owner’s coins to a third-party wallet.
Alex DovbnyaCyber criminals can also use the wallet feature to send several fake transactions at once and then change their route before confirmation.
However, the good news is that Bread Wallet and Ledger Live have taken measures to prevent these attacks and have released the necessary software updates.
Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.
Gamza Khanzadaev
Dan Burgin
Vladislav Sopov