Acquired Electronics360

Financial and ID Technologies

Bitcoin Wallets are Vulnerable to Hackers and Security Defects

23 January 2018

Devices used to manage Bitcoin accounts could be improved for better protection against hackers, according to recent research.

Source: Tech in AsiaSource: Tech in Asia

Computer scientists have discovered weak spots in security of gadgets that manage personal accounts with Bitcoin, a form of digital currency that provides an alternative to conventional money that has recently gained popularity.

The researchers identified how these wallets may be improved. Their findings could help technology firms improve how the devices — called Bitcoin hardware wallets — interact with our PCs.

A team from the University of Edinburgh carried out an in-depth security analysis of the communications system used in popular models of Bitcoin wallet. The researchers created a simple piece of harmful software, or malware, that was able to intercept messages sent between hardware wallets and computers — where users manage Bitcoin accounts.

The tests revealed that users’ privacy is not protected. They showed how easy it is to access Bitcoin funds managed by these devices and divert them into a different account. Based on these findings, researchers proposed a fix for improving the security of these systems. This would encrypt particular messages sent between Bitcoin wallets and computers that make them much more secure. Their fix could be incorporated into all models of Bitcoin hardware wallets to offer better protection against hacks.

Dr. Andriana Gkaniatsou, from the University of Edinburgh’s School of Informatics and lead of the study, said “A wallet should protect not only our money but also our privacy. It was surprising to discover how easy it is to access a user's funds, even when the sophisticated hardware is incorporated. Unfortunately, there is no silver bullet when it comes to protecting financial digital assets - we need to ensure that all components of the system are equally protected and interact in a secure way."

The paper on this research and discovery was published in Information Security.

To contact the author of this article, email Siobhan.Treacy@ieeeglobalspec.com


Powered by CR4, the Engineering Community

Discussion – 0 comments

By posting a comment you confirm that you have read and accept our Posting Rules and Terms of Use.
Engineering Newsletter Signup
Get the Engineering360
Stay up to date on:
Features the top stories, latest news, charts, insights and more on the end-to-end electronics value chain.
Advertisement
Weekly Newsletter
Get news, research, and analysis
on the Electronics industry in your
inbox every week - for FREE
Sign up for our FREE eNewsletter
Advertisement

CALENDAR OF EVENTS

Date Event Location
23-27 Apr 2018 Oklahoma City, Oklahoma
10 May 2018 Pier 94
22-24 May 2018 Los Angeles, CA
04-07 Jun 2018 Boston, MA
06-08 Jun 2018 Los Angeles, CA
Find Free Electronics Datasheets
Advertisement