Bitcoin Forum

It seems that someone has successfully hacked MyEtherWallet and has stolen some people’s tokens. Mine seem to be fine for now.

Has anyone lost any Etherium or tokens and does anyone know how the hack was perpetrated?

This is potentially a major security risk because we all know that keeping coins on an exchange is a high risk. Now using MyEtherWallet may also be risky.

It was related to MEW's DNS being highjacked. So if you used MEW during the time with that hacked DNS then you're screwed. Otherwise, you're fine.

https://www.reddit.com/r/ethereum/comments/8ek86t/warning_myetherwalletcom_highjacked_on_google/

This is a important problem, don't save you asset on 1 place!Save it at some place and offline on trazor,I can't imagine newday and all asset is lost

Yeah I read about the news and I hope it wont affect any of our dear community member, I want to use mew when i heard the news, I didn't proceed with it, and i think it is better and safer to use metamask for now in my own opinion.

I read about this news but was pretty much worried since I used it a day before the announcement of the DNS hijack.  Though I got a couple of question here just like my friend, is it possible that a bookmarked site can be redirected to the phishing site once opened?  I hope it won't though.

Is it possible to enter the MEW safely now?

I know it wasn't a hack per se but is there any way to identify  the DNS redirection so that we can stop logging in? It would be nice if someone points out how to find out

It is really unfortunate how hackers keep finding means to steal people hard earn tokens and coin. I am so sad about it and wished there is something I could do to prevent all these things from happening. It's really painful when you are been hit by a hacker.

I use Ethereum wallet to keep, send and receive ETH but it does not support ERC20 token. If it supports ERC20 token, I think there is no reason for me to use MyEtherwallet anymore. input or password and private key into a website (for any reason) is not safe!

yes, Myetherwallet DNS hijacked from a malicious attack.
Now MEW wallet is safe. They published it on their official twitter page. Check this: https://twitter.com/myetherwallet/status/988836522974572544

Sorry guys. I am a MEW user and using private keys only. What is this DNS you are talking about? How can hackers get access to my account? I just checked my MEW and my coins seem to be intact.

Please check these two articles, they sum up everything

https://doublepulsar.com/hijack-of-amazons-internet-domain-service-used-to-reroute-web-traffic-for-two-hours-unnoticed-3a6f0dda6a6f

https://blog.cloudflare.com/bgp-leaks-and-crypto-currencies/

TL;DR - always check certificate of website before logging in. Even if it bookmarked - always double-check :)

Fortunately not, I use my local DNS so I was not in danger even if I would access MEW when it was still vulnerable. Be sure that the certificate in your URL is green and not changed, also avoid accessing the site if there are any warnings about suspicious activity when accessing MEW. The best solution is of course using it offline.

Thats why its never advised to use web wallets, but MEW was the only easy to use wallet in the Ethereum community. Also it was quite popular and widely used wallet. I hope not many people lost their coins or tokens due to this hack and that this vulnerability has been fixed by now.

no god no please god no ;D ;D

I think this is very important news, initially I do not believe in this news but many people are busy talking about it, I think we should menyimpanya not in one wallet only.

i am still safe, why they always attack in dns server?? why admin didnt take high security, if they always prepare then hacker never attack in server.

In my practice there was a case when I stole the coins from the purse myetherwallet. As it turned out later, I went to a phishing site and entered my private key, after which all the coins disappeared. After that I seriously started thinking about protecting their money and bought a hardware wallet ledger nano's. The purse is very much, small comfortable and very reliable. Recommend!

I'm kinda worried yesterday when the news come out. And i checked my mew wallet by typing my public address in etherscan. And my tokens are still intact. So the people who access their mew wallet that time when mew dns got hacked could lost their tokens. And fell bad for them.

Their official Twitter account says:

I recommend reading this article.

Luckily that i didnt use Myether Wallet since, Im only using Metamask for Token and ETH transfer. Very bad news for cryptocurry world. Hope this wont happen again in the future. Over $17k USD ETH stolen and much Token also.

The DND server has been compromised. This isn't the problem for only MEW, but many other websites as well. Actually, the havker was able to shift traffic to the malicious website. He was also able to hijacks amazon traffic for 2 hrs.

It is better to not access MyEtherWallet.com for the time being. If anyone still wants to access his funds, you can try Metamask, Exodus or idex for coin transfers. Never ignore the certificate warning that google gives.

Also have read the news about hacking MEW. Think it's better no to use it for some time till everything gets clear

I do not have complete information on the hack, but I heard that it involved DNS. Now I hear you that exchanges are very risky, but lately with all the hacks I am not sure, as you hear more people's wallet getting hacked than exchange accounts.

I've read that those who use myetherwallet with Metamask weren't concerned by this hack.
Isn't it majority of MEW users that use Metamask?

I almost become a victim of the hack, when I tried to use the wallet yesterday when I noticed the way the site was performing then I changed to mycrypto.com, I have said before that the main threat to the space is hacker not the governments that people keep talking about, the of hacks now is very sophisticated

Well, it was very unfortunate for the people who lost their funds. Last time I checked the hacker managed to get around 216 ETH and maybe the number is more now but everyone is made aware which is good to know.

The DNS server was hacked indeed,but it was fixed by the team behind myetherwallet as soon as the issue occured,all of the DNS are fixed and should be working properly clearly that hackers are good because they wont get those DNS if they are amature hackers.It seems they have stolen millions of dollars of ethereum from different people.

This simply could not be, to might have broken into. Probably got on some website which is similar or go in a purse in the wrong place or someone spied on.

How many times have we read on the forum about hacking wallets ... Why do not people use security rules? Even Metamask is safer, in my opinion ... And it's better to buy a hardware purse once and safely store tokens, do not enter private keys!

What the hell is going on? Too often they cracked MEW. I'm starting to worry about my tokens.

myetherwallet hack is most unfortunate and fud news it will definitely affect the entire market sentiment of erc20 tokens

I keep my money on 3 different purses. also I use Ladger Nano S to log in MEW.
but this does not give me full confidence. I plan to buy an additional laptop for offline transactions

It was hacked indeed,the DNS server from google was hijacked by those pro hackers who managed to redirect users from legit myetherwallet.com to their phishing site,which is why those people who have logged in their wallets with their private keys are hacked because these hackers did a perfect timing ,to have those ethereums.

Recently, the hacking of this wallet has increased. How to save your cryptocurrency now? Using hardware wallets also does not save you from breaking into DNS and switching to phishing sites. Who thinks anything about this, how to secure their ethers and ERC-20 tokens?  ???

After all this, I'd definitely recommend a hardware wallet just in case

This is why you should be using a hardware wallet.

I think that the trezor or nano s will solve all the problems with access to the wallets of the most common cryptocurrencies and erc-20 tokens.

This is why i'd recommend a hardware wallet always. can never be too safe.

Hopefully it's not true. Recently, I have been reading lots of articles and claims that myetherwallet is not safe anymore, and that many hackers have cracked how you invade and steal coins that are held in e-wallet sponsored by it. However, I think that it is still one of the best wallet around to hold coins, I still have not seen any reliable and true accounts of hacked myetherwallets except those that have been scammed or victimized through shady enrollments like scam airdrops. Thus, I would still believe that the people behind this wallet would do something to safeguard the coins of the many people using it.

If myetherwallet is hacked it is a very bad situation.I do not have any problems for now.My friends said they have no problem with their wallet.I hope there is no problem with your wallet

Too often? Honestly, it is the first time when I hear about some problems with myetherwallet. Of course, I don't take into account those situations when users just enter their key on a phishing website due to their own unattentivenes - it is by no means a MEW's ploblem.
Actually, current situation is also not a MEW's problem - though it isn't so obvious for most of us - it is a problem with DNS, as was explained above.

Not again, if my memory servers me right, MEW was attacked using the same exploit months ago isn't it?

I just checked my MEW thru etherscan and my tokens are still intact, but I wouldn't login to my account yet before everything is safe. Hackers really target crypto now more than ever, so be safe everyone because it looks like they are really one step ahead of us. Just be careful on clicking websites that might be a phishing site, or get a hardware wallet if you are holding a lot of tokens worth thousands of even millions USD.

Just be more careful when you want to open your wallet. always check the web address correctly and I recommend using metamask instead of private key when you want to see or send your token.

It seems to me that the good security of myetherwallet and the goof reputation of this myetherwallet already been infiltrated by some hackers. Some news I heard today is that they already been hacked and all their holdings got stole.

This case has already solved and i suggest you to not try to bump any old thread. Mycrypto has offline desktop wallet and it can be an alternative to the metamask because somwtimes it has a problem with the connection to be connected to the network.

That is really bad. I wonder what sense of humanity has left some persons that they have to go about hacking people's account and stealing off their coins or tokens. Sorry about your loss. You should get your account protected, so this doesn't repeat itself again. Get a hardward wallet if need be, and be more careful what you allow on your browser.

Fortunately not. Its very bad situation that everyone has to face on cryptocurrency. I think that the best solution is of course using it offline.

Nope, fortunately I successfully avoided stepping on a mine called hack/phish so far (the one that would result in lost funds), but once as a novice I got phished as a result of a Slack admin hack where perpetrator pasted a link to a scam MEW page, but I have identified my mistake a minute later and successfully transferred all of my funds to the new ETH address so no damage has been done.

MEW can t be hacked, your private keys has been stolen, how hacker did it you need to find out. Keep private keys on paper or a USB flash drive and always check the certificate of the payment system site.

That's why people are looking for cold wallet. In Ruby-X users can select the rate of cold wallet use 70% to 100%!
You can get Ruby-X token, RBY as $0.28 which will be $0.5 when the official service launches. Check our official website thanks!

Hacks are so usual thing now and it is not so happy because people lose so much money. As for me I like MEW and I have never had problems with it including hacks. I suppose that it depends on the person and his moves with money and private information as well.

i am so sorry for this i hope that younwill cope with this awful sotuation as soon as possible such things should not happen

of course peopel are not happy i think that we shiuld be careful when choosing a wallet though inhave nothing against myetherwallet

Personally I don't store my assets in any online wallets. I use hard wallets for my savings. I only use online wallets for trading and other stuffs. But throughout my usage of mew I haven't had any issues at all, no hacks or lost funds at all. That is wjy it is advisable to always buy a hard wallet if you plan to store your coins for a long time.

Hacks are so useful for people who work with this platform so close and MEW is a really good one for work with money with the safe way and reliable transactions.

I'm just being distracted about this news. my question is how could this happen? is that possible to hack the ERC20-wallet like MEW for me  its superb in terms of security protocol but in other side. I believe that this is not a Hacking but and ordinary incident of Phishing and its only a lapses of the users part and not on MEW.

storage on wallets or on the stock exchange has a risk and if a hacker wants to hack your wallet, nothing will stop it. therefore, we ourselves should be insured and not go to different questionable sites.

Fortunately, I rarely use the private key to access the ETH wallet. and also I created about 10 different MEW wallets and place crypto assets among them. To access the exchange, I use the IDEX Keystore File and password, for some reason it seems to me that this is a more secure method, but I'm not sure. At least for 2 years I have never been hacked.

The community needs to gather as much information as possible about hacking MEW. The more we know about the methods that hackers use the easier it will be for us to resist them.

Yes, before you fully use this wallet, it is better to read first this article, which is written in great detail about how to protect your funds on the wallet. At the moment, the issue of personal cybersecurity is very important and necessary.

This thread is actually a reminder for me of the security flaws of My Ether Wallet. It is no longer new that a safer place to keep our digital assets is the use of an hardware wallet. I am yet to hear about any security breach on an hardware wallet.
Stay safe friends, Crypto is still a jungle until things mature in this space.