Crypto Wallet – What Could Go Wrong

Cryptocurrencies such as Bitcoin or Ethereum require a private key to prove ownership of the asset. Most often, this key is generated and stored by software called a crypto wallet. A crypto wallet is generally responsible to: Generate seed phrase and associated private keys Store the private keys securely Provide a way to sign transactions, interact with applications (dApps), move the funds, ... Several hacks and vulnerabilities are related to crypto wallets. The presentation will consist of the study of several vulnerabilities that have affected known wallets: bad cryptography implementation (Randomness, MPC, IOTA wallet), Supply chain Attack (Ledger Connect kit, IOTA Trinity wallet), smart contract bug (Parity hack). This presentation does not consider vulnerabilities which target the user, e.g. to sign a malicious transaction.