TREE NEWS reports: BlueWallet’s chief technology officer screened 904 iOS apps listed on the App Store as non-custodial crypto wallets, analyzed 494 of them and flagged 45 as having potential severe or high security risks, including 23 rated potentially critical and 22 high risk. The issues cited include suspected uploads of mnemonics or private keys to servers, weak wallet randomness, server-side key storage, hardcoded encryption keys and loading of unsigned JavaScript that can interact with sensitive wallet data. The CTO noted the findings may include false positives and that apps absent from the list are not necessarily safe.
BlueWallet CTO Flags 45 of 494 iOS Crypto Wallets Over Security Risks
AI take
The striking part is not the count but the failure modes: mnemonic exfiltration, weak randomness and unsigned JavaScript are exactly the classes of flaw that turn a self-custody wallet into a custodial one without the user noticing. For anyone treating App Store listing as a proxy for safety, this undercuts that assumption, and the CTO's own caveats — false positives possible, unlisted apps not cleared — mean the list is a starting point rather than a verdict. Whether independent reviewers reproduce or dispute these findings is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.
Related News
1h ago
Binance to Resume Withdrawals for More Assets From 04:00 UTC Nov 5
2h ago
Hang Seng Tech Index Rises Over 5%, Iluvatar CoreX Jumps 10%, NetEase and Meituan Up 8%
2h ago
India Warns AI-Assisted Hackers Targeting Crypto Exchanges
4h ago
Pendle Volume Hits $221.5 Million, a 30-Day High
4h ago
Two Prime CEO Calls Babylon, Stacks Bitcoin Yields ‘VC-Funded Subsidies’
4h ago
Ionic Digital Q3 Revenue Up 32% as AI Data Center Leasing Dominates