Security News > 2022 > April > Flaw could have granted criminals control over Ever Surf crypto wallets

A flaw detected in the browser version of the Ever Surf cryptocurrency wallet could have given hackers who exploited it full control over a targeted user's wallet, say threat hunters at Check Point Research.

"Despite the fact that Surf uses reliable cryptographic libraries for the key derivation and the encryption, the sensitive data in the web version of Surf doesn't appear to have adequate protection."

Ever Surf plays a number of roles for Everscale blockchain.

There are mobile app versions of Ever Surf that are available in both the Google Play Market and Apple Store sites as well as a web version that runs on any platform.

When individuals run the application for the first time, they're encouraged to create a new wallet and Ever Surf generates a seed phrase and both public and private keys.

With Ever Surf, the data used to control the user's wallet is stored on the computer, so the only protection is strong encryption.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/04/25/ever-surf-wallet-vulnerability/