ETHSecurity Community

And yes it can affect your seedphrase and expose your wallets. Be extra cautious.

Bear practices below  🧵👇

And yes it can affect your seedphrase and expose your wallets. Be extra cautious.

Bear practices below  🧵👇

https://appleinsider.com/articles/25/01/28/two-apple-silicon-chip-flaws-could-make-your-private-data-vulnerable-to-theft

Just your typical man boy art dad love blaster. Drawing bears every day until…

natebear.art

Hardware Wallet Interfaces
	•	Web interfaces used to manage hardware wallets could be compromised
	•	The attacks could potentially intercept seed phrases during wallet setup or recovery processes

Specific Attack Scenarios
Direct Data Theft
	•	Attackers could steal private keys or seed phrases displayed in browser windows
	•	Sensitive wallet information could be exposed during backup or restoration processes

Indirect Access
	•	Even if seed phrases aren’t directly visible, attackers might access encrypted keystore files
	•	Password managers or authentication tokens could be compromised if accessed through vulnerable browsers

Protection Measures
Browser Security
	•	Never access cryptocurrency wallets while having other tabs open
	•	Use a dedicated browser profile for cryptocurrency activities
	•	Consider using browsers not known to be affected by these vulnerabilities

Hardware Security
	•	Use hardware wallets that don’t require browser interfaces
	•	Input sensitive information only through the device’s physical interface
	•	Keep firmware updated on all devices

Until Apple releases patches for these vulnerabilities, cryptocurrency users should exercise extreme caution when accessing wallet interfaces through Safari or Chrome on affected Apple devices.

Browser-Based Risks
Chrome and Safari Vulnerabilities
	•	Malicious websites can exploit these flaws to read data from other open browser tabs
	•	If you access a cryptocurrency wallet’s web interface while the attack is active, sensitive data could be exposed

i like coffee, crypto, animals, plants, drones, 3D printing, midjourney, and stickers

Agree. But also think the recommended precautions are good practices anyway, even if this vulnerability could only happen in rare scenarios.

while these type of stories are interesting there has been zero people affected by this in the wild so a little context is good sometimes instead of telling people their seed phrases are at risk