How Cake Wallet’s Broken Seed Generator Got My Bitcoin Stolen

This happened in May 2021. For years, I believed something had gone wrong during a Bitcoin-to-Monero exchange. Only now, after investigating Cake Wallet’s historical source code, analysing the blockchain transaction and checking independent vulnerability research, have I finally discovered what really happened.

On 24 May 2021, 0.02 BTC was stolen from my Cake Wallet immediately after it arrived. Cake later promised compensation, but never paid.

The evidence now leaves almost no room for doubt: Cake generated my 12-word Bitcoin seed using a catastrophically weak random-number generator. Someone reconstructed my private key, monitored my wallet and swept the deposit.

Continue reading “How Cake Wallet’s Broken Seed Generator Got My Bitcoin Stolen”

Hack de ATAG One Android App

PlayStore-AtagOneApp
De ATAG One app, gemaakt door Applied Micro Electronics AME B.V.

De ATAG One app (voor iPhone en Android) benadert rechtstreeks via het locale netwerk de ATAG One thermostaat. Atag stelt helaas geen technische documentatie online beschikbaar hoe de thermostaat aan te sturen is. De enige manier om uit te vissen hoe de app “praat” met de thermostaat, is door de app te hacken 🙂

Lees verder…