Bitcoin Core Developer Raises Alarm Over Self Custody Wallets After Losing BTC to a Hack

let atwWrapper,atwContainerWidth,atwSliderBox,atwTotalWidth; function initATWSlider() { atwWrapper = $('.relatedInstruments'); atwSliderBox = atwWrapper.find('.slider'); atwContainerWidth = atwWrapper.width(); atwTotalWidth = atwSliderBox.width(); if(window.domainId === '2' || window.domainId === '3'){ atwWrapper.find('.sliderRight').addClass('js-slider-prev'); atwWrapper.find('.sliderLeft').addClass('js-slider-next'); } else { atwWrapper.find('.sliderRight').addClass('js-slider-next'); atwWrapper.find('.sliderLeft').addClass('js-slider-prev'); } if(atwSliderBox.find('.instrumentBox').length > 6){ atwWrapper.find('.js-slider-next').fadeIn(600); } } function atwMoveRight() { atwWrapper.find('.js-slider-prev').fadeIn(150); $(".slider > :visible:first").hide(150) $(".slider > :visible:last").next().show(150); if(!$(".slider > :visible:last").next().find('.name')()){ atwWrapper.find('.js-slider-next').fadeOut(150); return; } } function atwMoveLeft() { atwWrapper.find('.js-slider-next').fadeIn(150); $(".slider > :visible:last").hide(150); $(".slider > :visible:first").prev().show(150); if(!$(".slider > :visible:first").prev().find('.name')()){ atwWrapper.find('.js-slider-prev').fadeOut(150); return; } } initATWSlider(); //update star icon on adding/removing instrument to/from specific watchlist atwWrapper.on('click', 'label.addRow', function() { let parent = $(this).parent(); let checkedPortfolio = false; parent.find('input[type=checkbox]').each(function () { if($(this).is(':checked')){ checkedPortfolio = true; } }); let closestStar = $(this).closest('.addToPortWrapper').find('.star'); if(checkedPortfolio){ closestStar.addClass('added'); }else{ closestStar.removeClass('added'); } }); //update star icon on creating new watchlist atwWrapper.find('.js-create-watchlist-portfolio').find('a.js-create').on('click',function () { let parent = $(this).parent(); let watchlistName = parent.find('input[type=text]').val(); if(!watchlistName){ return; } let star = $(this).closest('.addToPortWrapper').find('.star'); star.addClass('added'); }); //update star icon on adding new position atwWrapper.find('.js-create-holdings-portfolio').find('.js-submit').on('click',function () { let addPositionForm = $(this).closest('.addToPortfolioPop').find('.holdingsContent'); let amount = addPositionForm.find('.js-amount').val(); if(amount < 1){ return; } let star = $(this).closest('.addToPortWrapper').find('.star'); star.addClass('added'); }); atwWrapper.find('.instrumentBox').find('.shortInfo').on('click',function () { if(!window.ga){ return; } let pairId = $(this).parent().find('.js-add-to-portfolio').attr('data-pair-id'); let pairType = window.atwPairTypes[pairId]; window.ga('allSitesTracker.send', 'event', 'content', 'symbol link clicked', '', { "dimension147":"symbol_link_clicked", "dimension163":"click", "dimension148":"symbol", "dimension162":"content add to watchlist", "dimension161":"article page", "dimension142":"article", "dimension75":pairType, "dimension138":pairId, "dimension118":"2971794" }); window.open($(this).attr('data-href')); }); window.atwPairTypes = {"1057391":"indice","1172292":"Equities"};

• The Bitcoin core developer Luke Dashjr lost all his BTC in a hack.
• Dashjr revealed the wallet addresses where the stolen bitcoins were sent.
• Changpeng Zhao (CZ), the CEO of Binance, has offered to assist the developer in reclaiming the stolen bitcoins.
• Earlier, CZ warned cryptocurrency enthusiasts to be careful with self-custody wallets.

Bitcoin core developer Luke Dashjr said he lost all of his BTC to a hack. Hackers gained access to the developer’s PGP key in some way that is unclear to him.

.tweet-container,.twitter-tweet.twitter-tweet-rendered,blockquote.twitter-tweet{min-height:261px}.tweet-container{position:relative}blockquote.twitter-tweet{display:flex;max-width:550px;margin-top:10px;margin-bottom:10px}blockquote.twitter-tweet p{font:20px -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif}.tweet-container div:first-child{ position:absolute!Important }.tweet-container div:last-child{ position:relative!Important }

PSA: My PGP key is compromised, and at least many of my bitcoins stolen. I have no idea how. Help please. #Bitcoin

— @LukeDashjr@BitcoinHackers.org on Mastodon (@LukeDashjr) January 1, 2023

Pretty Good Privacy key, or PGP, is a well-known security mechanism that employs two keys to protect access to encrypted information.

While responding to messages from concerned crypto community members on Twitter, Dashjr said he noticed some suspicious movement. According to him, Coinbase (NASDAQ:COIN) and Kraken sent him emails about login attempts.

Dashjr revealed some wallet addresses where the stolen bitcoins were sent. The address received 216.93 BTC in four transactions within 16 minutes on the last day of 2022. In addition, the developer stated that law enforcement agencies have failed to track the hacker despite receiving his complaints.

Call for Caution With Self-Custody Wallets

So far, Dashjr has received mixed responses about the theft. Some cited that negligence on his part could have led to the attack. However, the CEO of Binance, Changpeng Zhao (CZ), has volunteered to assist him in reclaiming the stolen BTC.

Sad to see even an OG #Bitcoin Core Developer lost 200+ BTC ($3.5 million). Self custody have a different set of risks.We will try to monitor and see where we can help. https://t.co/9eGZ7AFgC2

— CZ Binance (@cz_binance) January 1, 2023

In replying to Dashjr’s tweet, the CEO said he had informed the security team of Binance, and they won’t hesitate to freeze the stolen BTC if the hacker transfers them to the cryptocurrency exchange.

CZ recalled how Binance has dealt with stolen crypto assets in the past due to its connection with law enforcement agencies globally. He also urged Dashjr to inform him if he needed help regarding the missing BTC.

CZ warned cryptocurrency enthusiasts to be careful with their self-custody wallets as they pose their own risk too. Some Twitter users backed the Binance boss’s claims, stating that self-custody wallets require a high degree of diligence and security.

Self custody requires a high degree of diligence and security approach

— Olumide Adesina (@TokunboAdesina) January 1, 2023

On the Flipside

• Although no encryption method is 100% secure, PGP keys are considered extremely safe and were even used by Edward Snowden. As a result, it raises questions about what led to the compromise of the developer’s PGP keys.
• Dashjr used PGP to verify that Bitcoin Knots or Core downloads were malware-free. In the meantime, he warned the community not to trust bitcoin knots.

Why You Should Care

In the aftermath of the FTX crisis, the self-custody of crypto assets gained traction as large amounts of funds were moved from centralized to self-custody wallets. However, the recent hack in the wallet of an experienced developer demonstrates that assets are not even safe in self-custody wallets.

Explore more stories on cryptocurrency hacks:

More Than $3B in Crypto Was Stolen in Hacks This Year

Elon Musk Imposter Hacks UK Cabinet Minister’s Account, Promotes Crypto Scam

See original on DailyCoin