MyEtherWallet Launches Mobile ‘Hardware Wallet’ App Beta for iOS

  • ETH wallet interface MyEtherWallet has launched a beta version of its "hardware wallet" app, 
  • The app will reportedly allow users to access their funds without entering their private keys.

Popular Ethereum wallet interface MyEtherWallet (MEW) has recently launched a mobile ‘hardware wallet’ app for iOS, still in its beta version. The app, MEWconnect, is set to allow users to protect their funds as if they had a hardware wallet.

According to a recently published blog post, MyEtherWallet’s app is still in its infancy and, as such, this version is to be used for testing and debugging. The service asks users not to “use [the] beta version as a permanent ETH storage solution.”

The app essentially lets users log into the service without using their private keys, a significant security addition given the phishing attacks that have plagued the crypto ecosystem. MEW itself was hit when hackers attacked the internet’s core infrastructure to swindle its users.

Per the organization, the MEWconnect app gives users the “security of a cold-storage wallet on your mobile phone.” Its post reads:

We want to provide you with an instant and secure way to store and exchange ETH, while at the same time facilitating wider cryptocurrency adoption. We believe MEWconnect is that missing link the Ethereum community has been looking for.

MyEtherWallet

A stable version of the app for both iOS and Android is set to be released in August. Cold-storage solutions like Trezor and Ledger wallets are seen as the best way crypto enthusiasts have to secure their funds, but can cost between $90 and $200. The MEWconnect app, however, will be free.

Speaking to TechCrunch, MyEtherWallet founder Kosala Hemachandra revealed the service has also launched a bug bounty program along with the beta version, so users can help test the app and improve its security. Rewards for submitting a bug will vary between $250 and $2,000.

In the future, the app could add payment options and other features. Notably, as CryptoGlobe covered, the release comes shortly after MyEtherWallet added ETH credit card purchases through a new partnership.

A rival service, MyCrypto, which took over MyEtherWallet’s Twitter account when it launched in what was deemed a “hostile takeover,” is also looking into ‘hardware wallet’ app solutions as it currently supports the Parity Singer app.

Error in Time-Locked Bitcoin Contracts Allows for Miner 'Fee-Sniping'

Michael LaVere
  • Crypto researcher 0xb10c discovered an error in bitcoin "time-locked" transactions that could be used as an attack vector.
  • Miners can take advantage of the program to carry out "fee-sniping" and steal funds from one another. 

Users have discovered an error in bitcoin “timelocked” contracts that could potentially allow miners to steal BTC from one another. 

Anonymous crypto engineer 0xb10c reported discovering more than one million “time-locked” transactions made between September 2019 and March 2020. In a post, 0xb10c detailed how these special bitcoin transactions were not being accurately enforced by the network. 

As opposed to normal transactions, time-locked transactions prevent recipient bitcoin from being accessed after sending. Users must wait for a specific number of blocks to be added to the network in ten-minute intervals before gaining control of their bitcoin. 

0xb10c claimed the errant time-locked transactions provided an attack vector for miners to steal transaction fees  from one another via “fee-sniping.” According to the engineer, the backlog of time-locked transactions were being purposefully designed for a “potentially disruptive mining strategy” involving the theft of miner fees. 

In an interview with CoinDesk, 0xb10c said time-locked transactions represented a “low-priority” problem at present that could eventually balloon to involve the wider network. He explained that fee-sniping would become more lucrative in a few years as the majority of miner income shifts towards transaction fees. 

He continued, 

A fix for this has been released in early 2020. However, it will take a while before all instances of the currently deployed software are upgraded.

Featured Image Credit: Photo via Pixabay.com