Bitcoin Forum

can they be hacked, and the funds stolen, do they have a special wallet where they keep all the btc ? how do they work exactly?

can they suddenly decide to hold your btc, or restrict you or prevent you from sending or receiving bitcoin ? if you don't provide id or for whatever reason ?

do you own your btc (menmonic) with them or is it in their control?

thanks

Probably. Anything online can be hacked, it may be in a different way like if there is someone in their office who suddenly got crazy and stolen funds in it. Or someone who is eats and breathes how to penetrate their servers, I always believe the security expert who said every thing that is online and are on the live server can be hacked.

Don't forget to ask your self that what make bitcoin and the blockchain really is and it nature were decentralization and freedom, but at that there are challenges facing the entire cryptocurrency industry which can come from hack and regulations which some time give room for KYC and other restrictions but we don't have identity verification on blockchain.com yet.

I certainly agree with you. Even if we say that every site or even exchanges comply with the security measures needed, it isn't still %100 safe and secured. The technology is getting more advanced and hackers are getting smarter and skilled so we have to be observant and careful with our funds all the time.

I strongly agree with you that is why they are always upgrading their security system,
Because anything online is prone to hacking "no system is safe" when it comes to the internet .
That is why I am only trusting my funds or crypto on a hardware wallet.

Blockchain's online wallet can be hacked, several years ago someone successfully retrieved several wallets then returned the amount(article (https://www.coindesk.com/good-samaritan-blockchain-hacker-returned-255-btc-speaks)). I don't think they have a hot wallet like exchanges since we could move our address on to a different wallet using the backup. It's recommended to store your seed and blockchain isn't an exchange they don't require you to have an ID and i've never seen someone get restricted from using their wallet.

everything can be hacked, nothing is completely safe.all we can do is protect ourself better but once again there is no such a thing as %100 protection.hackers always find a way.

With what happened recently regarding the top exchange that got hack, I think any thing connected to the internet is prone to getting hacked. Cryptocurrency involves blocks of code which at the end of the day their might be a little mistake in it, which gives hackers the chance to engage in their dangerous act also it might be from the site minor or major patch or thereabout. In as much as hacking is beyond crypto sector I think hacking is possible in any place only if the developers of the platform are constantly upgrading the platform.

Anything on the internet can be hacked. Once you know what you're doing, hacking into company websites and computers is a cinch. Every system has an underlying pattern, figure out how the pattern works and no matter how complex it may be, you can then exploit it.

blockchain.com hosts a non-custodial wallet service. they don't "hold" your BTC. that's why they can't recover your wallet for you if you lose your key/password. your seed can be used to recover your coins to any other HD wallet.

so it's not as bad as 3rd party web wallet services that actually control your BTC. but there are still some security hazards. you are prone to various MITM attacks when you use a trusted online service like blockchain.com to sign and push transactions.

Are you sure with that?

You can't literally hacked all of the things in the internet thus you can collect information through bypassing a security. That's the reason why some of the social media accounts where being hacked but literally they're being hijacked and the information was being collected. Also, blockchain has an ultimate security, you can't easily hacked each wallet and control the transaction. The only thing you can do is decrypt but that's not very sure you can do it.

Any web wallet could be hacked including blockchain. It's not very safe holding bitcoin on any web wallet for long time. But blockchain is more stronger from other web wallet. Hackers are more smart from us usually. So hold your bitcoin on hard wallet or offline wallet like bitcoin core. Wallet with private key is more safer than web wallet. Private key give you control of your fund and it's your responsibility to keep safe. Web wallet likely fail to save your fund in case happen any hack.

You can hack a lot of stuff on the internet through different ways, but I do agree that it is not possible to hack literally everything. It is not exactly a cinch to hack every website out there due to the advancements in security protocols. Most hacker groups usually have insiders to assist them to help perform the hack which is why these operations are seriously complicated and not easy to pull off.

Do you guys mean a white hat hacker or the gray hat hacker? Anyway, most hackers have their own leader and probably from the government while some of them are from a group of people who do have knowledge about programming.

And for OP, this link might help to your question:
https://www.quora.com/What-would-happen-if-the-BlockChain-were-hacked

there is no "ultimate security" when it comes to security and every security setup can be broken into. so yeah blockchain.info like anything else in computer world can be hacked, it is just different levels of hardship.
they keep wallets encrypted in their servers and the process of encryption/decryption is done inside user's browser so if you hack their server you can gain encrypted wallet files. but the encryption can be broken too. for example if their implementation had some bug in it, considering blockchain.info has a lot of bugs in their system it is not far fetched to think there are security holes everywhere else too.

All online wallets can be hacked, there will be no exceptions for any online store. Blockchain.org they don't hold your BTC, so when you lose your private key, it won't be able to recover that BTC number.

Everything online can be hacked. So it's possible that every website can be hacked by someone. Recently a certain website that is well-known had been hacked and everyone of us knew about it.

As what they have said above that all web wallet can be hacked then that is true. Online wallet and web wallet that working blockchain technology can be hacked. Because hackers nowadays were getting smarter, even though a high reputed exchange can easily bypass their security of cold wallet and it has happened recently. But I disagree that anyone in online could be hacked if you know how to keep private key safe and have a clean laptop you have nothing to worry.

Online services can be "hacked" at anytime. That is why its most recommended people have control of their own wallets, instead of relying on a third party that might or might not do a good job protecting it.

Well managed online services will take a close look at how much of the funds in their possession are actually moving, this way they can move the large non moving coins into cold wallets, precisely to protect from such attacks.

But still, chances are the company might go bankrupt or will never be able to respond to all customers such an event like this occurs.

For some of the people replying on this thread: Please do not confuse blockchain.com online wallet service with Bitcoin blockchain. Blockchain does have a Bitcoin blockchain browser, but that's all it does, browse the blockchain. This can be done from many online sites, its read only, the blockchain is public and immutable. It can only grow, and to grow you have to find the next block, that is, mine it... I don't think i have to explain you how much hashing power you need to be able to find the next block and earn 12.5₿...

No meyt  . they are right .  anything online is really hackable  . no matter how secure your account , there will be times that a hacker can bypass it  .  if you keep your private key on a clean laptop , your laptop can still be access by a malware or a virus and he will find out your private key  .  it all happens once you start to connect a third party device on your laptop and if that device is infected   .  

Even the blockchain technology that all people thinks secure can also be destroyable by super computers or via
 quantom computting

I have heard of people having funds stolen using that site. If you have a weak passphrase or a trojan in your computer, you can be vulnerable no matter what website you use. I recommend using 2FA when possible and regularly changing passwords, and even better is using a hardware wallet - they are cheap nowadays.

Blockchain.com is an online web wallet even if the company rolled out multiple security features and latest defense mechanism it is also vulnerable to hacking its correct online sites are not totally secured, every day they are trying to break and break the codes, penetrate the system and try steal users money, even the biggest crypto exchange was hacked lately nothing is safe now unless you are offline.   

The Blockchain technology is claimed to be unable to be hacked because the data stored is not centralized but is in several places. If one is hacked then the other system is not affected. there is one way to be able to hack this technology that is hacking simultaneously the majority of systems in all storage areas.
But the level of difficulty is also high. For example, there are five data storage systems with different encryption. If hackers are able to break three systems, then everything will get hit. So, Blockchain is quite impossible to hack.

We cannot assure that blockchain.com can't be hacked as the hacker will surely do everything to bypass whatever security that has been installed from it.
This only shows that if there is a will there's always a way but it cannot be done easily as not all the professional hackers are blackhat.

We are lucky as there are whitehat hackers also who keep on studying, evolving their skills, knowledge and securities in order to either stop or trace the people behind any malicious attack.

Literally anything can be hacked online if you are not serious about the security, since the OP is talking about the website blockchain.com, sure it can be hacked if the hackers could figure out their loop holes, but when it comes to blockchain, good luck with it, there is nothing that can be done to hack that as we speak and i am sure people are trying their best to crack that puzzle ;D.

This is a good question especially we know the importance of block chain of those huge bitcoin transfers for transparency if it involves in payment form. Block chain is the only prove for now that the transaction was being done successfully because the users were anonymous and there is no way that we can identify the users through online. But, if it is being done locally with the consent of the parties after the transfer then that could be alright. I will see how other users will going to reply on this thread. This may seem interesting for I considered myself new in bitcoin and blockchain.

almost imposible in my opinion to hack Bitcoin wallet, it not mean can't be hacked. Maybe a professional hacker could hacking it, yet i never heard a news about bitcoin wallets are hacked. All hacking crime almost happened on the exchange. why the hacker should to hack bitcoin wallet if they can hacking more easier on the exchange? If Bitcoin wallet is hacked of course the credibility of Bitcoin will decreased and losing trust from the society, I think the hacker wouldn't to do that because they also love this technology.

Now a day anything can be hacked it's a like a play game for a hacker
Online app things sites it's not difficult to hack
That's why they are called a hacker
Because they know everything

It seems to me that now nothing is impossible.  Everything can be done.  The only question is what is it worth doing and is the time spent worth this money.

Blockchain.com is just any online service which can be hack so far as there is vulnerability in their network system. If big exchanges can be hacked then Blockchain.com is not exception. However I think most of their client funds are stored in cold wallet and it can help matters in case hackers get access to their accounts.

I use their wallet for a long time and so far there have been no problems.But in fact, if desired, they can prohibit the withdrawal.About stealing,I think it's very hard.

As stated here, if blockchain is hacked most likely your coins will still be safe. Because they do not hold your btcs. But if your computer is compromised and you uses hot/online wallet like blockchain there is a great chance that you will get hacked.

blockchian.com could hack but not blockchain network. There impossible to hack the Blockchain network. We should learn what is the Blockchain network and how to work for better knowledge of Blockchain.

Based on the latest news (I mean hacking the exchange of Binance), I have no doubt that this wallet can naturally be hacked.I have not heard any bad reviews about this wallet,so I think you can use it for now.

This is particularly truth but practically all opinions agree that everything can be hacked some way or another. The thing is that their security is probably a lot higher than the one most exchanges tend to have.

And for that particular reason it's a lot morel likely that you will be the one hacked and than them and you know where your worry should be placed. You are the one who is storing your decryption key, that is more secure but less user friendly. Since they cannot reset your password in case you lose it.

They can certainly be hacked. But they actually don't have access to our fund since we control our keys. The blockchain wallet provided has its server, maybe through here the hacker can attack and cause a disruption. As for the freezing our fund because of KYC, this is impossible as we control our own private key, we can import to any wallet with Mnemonic enablement and fund accessed. Like am about to do to Imtoken now.

Just like i said elsewhere: not in your wallet, not in your control.

There could always be a "first time", and often, its the last time.

When you use an online wallet, you are trusting a third party will take care of your private keys for you. And they better do, because if something fails, someone could easily steal your coins.

Some people are too scared to become their personal bank on their own, and resort to third parties. Well, always consider that your laziness from not learning how to make and use a cold wallet (which could be as simple as writing 12 words with your own hands in a piece of paper), can lead to money loss.

And before you think your money in a bank is "safe", take a look at how fractional reserve banking (https://en.wikipedia.org/wiki/Fractional-reserve_banking) works. Just give it a thought, why is that a bank can go bankrupt, if they are keeping everyone's money? Because they don't keep it; and can't simply give it all back if everyone where to withdraw it at the same time. So no, a "modern" bank isn't any safe either. You may have been lucky to live in a stable economy, just like you might have been lucky your online wallet service has not been breached, yet...

Not your keys not your coins. Blockchain.com doesn't store keys or seeds on their servers but they're susceptible to phishing, Where site might get hijacked, cloned or hacked tricky users into giving their seeds, That's all that can be done I guess.

yes it can be hacked, because every website must have a gap that can be broken by hackers so sites like blockchain can be done stealing data about people who buy there every day can do bitcoin or other cryptocurrency theft. In addition, people can also create websites that are similar to blockchain, but that is a SCAM website.

Blockchain.com does not control your fund like typically exchanges do. Just make sure you copy your seeds/private keys and store somewhere safe just in case something bad happens to the company.
I think the Centralized nature of Blockchain.com wallets make it vulnerable to hacking. If in any case this happens you can simply move your seed to other wallet.

Indeed, any web wallet has been not safe at all or any online wallet. Even electrum, that isn't a web wallet and that is hardware wallet but still can be attacked by the DDoS. If you have a big amount of bitcoin I think the best wallet to store is an offline wallet which is very far from hacking incidents. Then if that small amount you can store it on the web wallet, maybe no one hackers get interested if you only store 50 dollars value on your wallet. ;D

No, Electrum isn't hardware wallet, no physical. Electrum as software wallet can be safe than webwallet like blockchain.com.

Electrum itself isn't a hardware wallet, but it is very easy to use Electrum as an interface for a hardware wallet such as a Ledger or Trezor, and indeed many users do this. This is probably the safest way to use Electrum short of running it on an air-gapped machine. There are also very insecure ways to use Electrum, such as with a weak password and by backing up your wallet.dat file to the cloud or your email.

A web wallet will always be very insecure. A software wallet can be very insecure or very secure, depending on how well you use it.

In theory, someone could hack their website to change the javascript on the website so that anytime a blockchain.com wallet is accessed, the xprivkey will be transmitted to the hacker, or blockchain.com could make this change and the private keys would be sent back to their servers.

I suspect this type of hack would be very short lived, and their wallet service would be quickly shut down once discovered.

Of course it can be. Till now, a lot of exchange has been hacked. Cryptopia and Binance is the earlier one. They used to have more security. But still they have been hacked. On the other hand, your account is an online one which can easily be hacked.

One of the popular questions we get multiple ways per times! Just because something provides regular upgrade on their security system, doesn't mean at all could not be hacked. Even reputation means not a lot. There's always a way any wallet could get compromised, like blockchain.com or so.

No online website is entirely safe from hacking attempt especially when it run automatically and store its goods/services both digital and physical stuffs online can be hacked.
Cryptocoins are better safe offline.

Skycity Aug 27, 2019 22:50 EDT

This morning I found my BTC balance 0. But it must be 0.035 BTC on it (about 350 USD).
What happened? I did not send anything or even accessed my BTC wallet.
Please HELP.


   
Greg (Blockchain)

Aug 28, 10:13 EDT

Hello,

I'm very sorry to hear about this. You may have some type of malware on your computer that resulted in your funds being stolen because your private information was somehow obtained. One of the most common types of these are browser extensions posing as bitcoin price tickers that are actually stealing your account information. There's also the possibility that you visited a phishing site posing as Blockchain. We've also heard of computer viruses that detect when an address is in your clipboard, and replace the one you wanted to use with an address controlled by this malicious party.

By design, Blockchain never has access to users' accounts or funds. If you keep your password and private key backups secure, then your funds are always safe with us. Since this information has been compromised, be sure to never use this wallet or any addresses contained within it. I'd also highly advise against using the same password again. I'm truly sorry that you had funds stolen from you. That certainly is an extremely frustrating experience.

If you?d like to learn more about how our wallet works, please visit: https://www.blockchain.com/learning-portal/wallet-faq.


Skycity Aug 28, 2019 23:54 EDT

Hello,
None of what you mentioned really occured, it was probably a breach in your security system. And, yes, again as you mentioned, that certainly was an extremely frustrating experience. But what is more frustrating is that you hold no responsibility. I was totally sure that my funds would be safe with you, blockchain.com wallet was chosen, because I trusted you.
But this is the point where trust ends.
That was not my fault. My computer is always double-checked and secure, and I never visit phishing sites or extensions. Such response from you, no help or compensation offered from your side, makes it even more frustrating.
I will never use again and will discourage other people to use your service.
I am also going to make this situation and our conversation public.

Sent: Wednesday, August 28, 2019 at 5:13 PM

I'm afraid this is almost certainly a breach on your end, not theirs.

Blockchain.com, like all other web wallets and exchanges, store all their customers' funds in one or two central wallets, and simply display your individual balance by updating a database. Had their central wallet been hacked, firstly your balance wouldn't have changed, and secondly, it would be all over the news.

There are many ways your coins could have been stolen. In addition to those methods mentioned in the email you received (malware and phishing sites, which are both very common), you also have to consider if you used a weak password, reused the same password across multiple sites, logged in on a public computer, and so forth.

Blockchain.com will hold no responsibility here. Here is an extract from the terms you accepted when you signed up to their wallet:

Unfortunately, there is nothing that you can do here. Your coins are gone. Take this as a lesson to never again trust a third party to hold your coins on your behalf, and instead learn how to safely and securely hold your own coins.

What blockchain wallet you use the mobile app or directly from the blockchain website?

Do you have two-factor authentication or 2FA? Do you whitelist only your IPs?

If you have this it's impossible for someone to login to your account and stole your BTC even you've phished unless if your secret key from 2FA is compromised and you are using the same password as Gmail account(Without 2FA). If they can access your Gmail they can easily retrieve information from your blockchain account by using "Remind me"(Wallet ID) or "Reset 2FA" and use the same password that you use from the phish sites.

Or if you are using the mobile blockchain wallet your phone might be monitored or remotely use by someone to get your 2FA and password from your phone.

Or possibly someone knows your blockchain seed phrase. Where do you save your seed phrase? If you just save it somewhere on your PC or phone (Might be infected) maybe someone stole your saved seed phrase and use it to recover the wallet from blockchain.

Try to ask blockchain support about login IP history to check if there is different IP login into your account.
If there is a different IP then someone has access to your Blockchain account but if none it might be a blockchain bug.

A website can be hacked. In fact any device connected to the Internet can be hacked. Now an offline wallet stored in a vault, without any connection to the Internet would be virtually impossible to hack.

That's why exchanges practice the cold wallet storage since it cannot be hacked. Their sites are open to attacks and attacks happen every day.

Blockchain doesnt hold or does know your keys and its your total responsibility on holding and keeping it away from others awareness for your wallets safety.
If funds being hacked or stolen then the only possible ways or reason is only on that keys alone.Someone do able to access it neither by phishing or some malware.
There are instances that no matter how sure we believe that it isnt the reason but actually it did happen.

You should read this topic and see how Blockchain wallet can be hacked:
https://bitcointalk.org/index.php?topic=5185385.0

I never trust an online wallet I'm only using it as a spare wallet and people should not put all their coins on this kind of wallet, if their is always update on the system. the hackers are also employing the best technology to hack these online wallets, we can never be 100% sure to have a peace of mind a hardware and a desktop wallet is always recommended, these two are created for maximum safety and because online wallets are not always secure.

That's why people are still getting scammed and/or hacked because of behavior like this, you never trust but you still use it, seriously?

Using it as a spare would already be considered since he dont trust it up he do only put up a small amount and already ready on what would happen later on if they got hacked.
There were other web-wallets we do know but we cant deny the fact that we do still consider up on using up this wallet which is way more preferable than to those unknown
wallet online.We know the current reputation of blockchain so i cant blame others for them to consider it.