Feb 5, 2022 05:56 PM
(This post was last modified: Feb 5, 2022 06:05 PM by Blazin.)
It was someone else's device they forgot the pin to get on the device a 4 digit pin after 3 failed attempts it wipes the whole thing. This guy found a flaw in the firmware that allowed him to get the private key by opening the device up and hooking onto the chips and stuff. It's open source so easier to look for things.
Those hardware wallets have been around since like 2015 the specific vuln he exploited was patched in 2017 but this guy had an older version of the hardware wallet with outdated firmware. So it's harder to hack now, but it's open source so people can keep looking.
The actual exploit when run took 3 hours to complete but it did it in the end. Surprising to me that the actual pin to access the device and get the data was not encrypted....



![[Image: lkp0bxV.jpg]](https://i.ibb.co/MD7cKcgB/lkp0bxV.jpg)



![[Image: Blockonome-Signature.jpg]](https://i.postimg.cc/0Q3348hL/Blockonome-Signature.jpg)