 Show Posts
|
|
Pages: [1] 2 »
|
|
Services blender.io and blenderwallet.io are closed for maintenance. Completion dates for technical work will be announced later.
Your funds in Blender Wallet are safe. You can wait for the service to open or access them with a mnemonic and passphrase in the Electrum wallet or any other compatible wallet.
For those who have not received mixing results, they will be sent when the service starts.
We apologize for the inconvenience, please do not worry, the services will be resumed in the near future
|
|
|
|
Blender Wallet just added the exchange of BTC to the folowing currencies and payment systems: RU: - bank card - QIWI UAH: - bank card - AdvCash USD: - AdvCash EUR: - AdvCash - Payeer KZT: - bank card At first, this function will be available to a limited number of people. If you want to get access to the exchange, you need to follow the link published in the telegram chat of the service - @Blenderio_Russian, @Blenderio_EnglishYou need to follow the link only once, after that the Exchange tab will become available. Exchange function is available without KYC. |
|
|
|
All seed phrase-related operations are now happen on the client’s side How can this claims be verified, and is there a way to generate mnemonic phrase offline that can later be used with Blender Wallet? Local storage encryption. To store securely all wallet-related information, local storage will be encrypted and protected with the help of a separate password. It allows getting access to the wallet without using a seed phrase. All you need is a storage and password. Can you tell us what type of encryption are you using exactly? Bad encryption can sometimes be just as bad as having no encryption. Blender Wallet: it’s a non-custodial BTC wallet focused on user privacy. Blender Wallet has been launched in 2020 by the same team that had development blender.io –Bitcoin mixer existing on the market since 2017.
Are there any plans to release Blender wallet app that can be downloaded and run from computer instead of using web browser? 1. The client-side code of Blender Wallet is not obfuscated and can be reviewed by anyone with technical skills. You can check what happens on the client side and what is being sent on server. Speaking of offline generated passphrases, this feature is related to import and we are working on it. 2. Blender wallet uses AES-GCM algorythm for storage encryption with 256-bit AES key. 3. No. Right now we are not working on that task.
All seed phrase-related operations are now happen on the client’s side How can this claims be verified, and is there a way to generate mnemonic phrase offline that can later be used with Blender Wallet? Unless it's open source, it's not easy to verify it unless you pay experienced auditor (with JavaScript/cryptography expertise). Additionally, this wallet isn't compatible with BIP 39 (i tried it with result from https://iancoleman.io/bip39). So there's concern you can't restore access to your coin if the service is down/dead. Defines a generation of recovery phrase and it's conversion into a binary master seed of an HD wallet. https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki |
|
|
|
|
Non-custodial crypto wallet Blender Wallet released an updated version and resumed its work. The updated Blender Wallet comes with brand-new features and skyrocketed security.
What’s new?
All seed phrase-related operations are now happen on the client’s side
To ensure Blender Wallet’s higher security, a mnemonic phrase and a password (extension of the mnemonic phrase) will be stored on a user’s device (either in a local storage or as a file). The process of transaction signing will now take place on a client’s side too, while any type of sensitive data won’t be stored on the server. Security elevated!
Local storage encryption. To store securely all wallet-related information, local storage will be encrypted and protected with the help of a separate password. It allows getting access to the wallet without using a seed phrase. All you need is a storage and password.
Blender Wallet: it’s a non-custodial BTC wallet focused on user privacy. Blender Wallet has been launched in 2020 by the same team that had development blender.io –Bitcoin mixer existing on the market since 2017.
Key Blender Wallet’s features:
– Canceling unconfirmed transactions. A built-in RBF (Replace-by-fee) feature allows canceling unconfirmed transactions mistakenly sent to a wrong address or just transactions that stuck in the mempool awaiting confirmation.
– Speeding up the incoming and out coming transactions
– Built-in mixer – a solution developed by the blender.io team which allows sending mixed money right from Blender Wallet.
– Address control. Blender Wallet allows you to send BTC from manually picked addresses, add several senders’ addresses and freeze addresses (meaning you mark them as unused while sending the money).
The team will keep informing you about the upcoming updates. Stay tuned for new updates!
|
|
|
|
Yes, right now our service is unsafe, therefore we closed it till October 2021. Right now we ware totally rewriting all infrastructure.
Why then on your blender wallet website we can see the statement that blender.io mixer works normally? If both your mixer and wallet are unsafe you should clearly post warning about that on website, but I see no information about this on blender.io website.  archive: https://archive.ph/sOMYMJust because MIXER and WALLET are two independent systems, that are connected only by API. Therefore blender.io mixer works properly and is absolutely safe. |
|
|
|
As a non-custodial service, we don't store seed phrases but with the help of this information, we are able to check the history of transactions and see how many of them have been performed through Blender Wallet. Couldn't you do all this without asking for the user's seed phrases? You could for instance have asked for a list of addresses with signed messages to prove ownership. First of all we asked users to check their wallet balance through Electrum. If balance is positive, we asked them to send all funds to another wallet. If balance equals 0, then it is easier for customers and our support to use seed phrases for investigation and proofing, that funds were stollen (some users send funds to their own wallets and pretended, that their funds were stollen). Anyway, after attack we don't recommend to use seed phrases generated earlier on Blender Wallet. |
|
|
|
As a non-custodial service, we don't store seed phrases but with the help of this information, we are able to check the history of transactions and see how many of them have been performed through Blender Wallet.
Few days ago I asked a question in your topic if Blender service should now be considered unsafe, until funds are returned to customers and flaws fixed, but I still didn't receive any answer. I will consider that not answering anything is a sign of confirmation. Yes, right now our service is unsafe, therefore we closed it till October 2021. Right now we ware totally rewriting all infrastructure. |
|
|
|
|
On June 19-22, an attack was made on our blenderwallet.io service, as a result of which an amount of about 100 btc was withdrawn from users' wallets. Here are transactions of thefts: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 the incident, we conducted an internal investigation, which resulted in the conclusion that such an attack could only be carried out by having access to the servers and the hosting account where the Blender Wallet servers were located. We have passed the information to the hosting and expect cooperation from them.
At the moment, we are working on improving the architecture of the Blender Wallet. The estimated launch date is October 2021.
|
|
|
|
|
As a non-custodial service, we don't store seed phrases but with the help of this information, we are able to check the history of transactions and see how many of them have been performed through Blender Wallet.
Fraudulent transactions have been identified according to several parameters, such as performing transactions bypassing Blender Wallet interface, turned off RBF, a single transaction sent from different wallets of our users as well as the time frame of the incident. Users witnessed the hack in real time and could cancel the transaction. But because of RBF being turned off, the button was inactive. Evidently, hackers didn't get access to Blender Wallet's functional. We can't say for sure whether they took it into consideration, but if the RBF feature was on, users could cancel a transaction with a single click.
|
|
|
|
How was this possible if it's a "non-custodial wallet"? Please elaborate...
Requesting the seed phrases and passwords from your users to be sent without encryption to an email address that might be compromised sounds highly suspicious.
Investigation process is still taking place. After all researches, we will come back and write in details how that happened. Please, be patient. |
|
|
|
Hi, im very sorry to hear my favourite service got hacked  This is second time i lost my money on mixers. Before i lost big money on bitcoin blender. Will it be back online after some security maintenance? I also lost about 5k$ ... can You refund me please? Yesterday i wrote to email and jabber but no reply yet. Today i used mixer and it still worked ok for me. We are continuing compensation process, please check your accounts. We will really appreciate, if you write in this topic, when you receive your bitcoins back. Of course, Blender Wallet will come back after fixing security leaks. Please, stay tuned. |
|
|
|
June 22, 2021 – Non-custodial crypto wallet Blender Wallet has been hacked. The hackers withdrew the amount of 100 BTC in total. As a non-custodial service, Blender Wallet doesn’t store data about users on servers. The Blender Wallet team has immediately disabled registration and access to the wallets to protect users’ funds and make sure that newly generated seed phases won’t get in hacker’s hands.The executives promise to cover the losses from Blender Mixer’s reserves. Every user who has lost the money due to the hack will get the exact amount of money on their balance. Further information on compensation will be available at https://blenderwallet.io and @BlenderWalletio_English Telegram channel. “Over the course of investigation, we promise to figure out how hackers managed to hack a non-custodial solution, as we don’t store any data granting access to users’ balances on our servers. We initiated an internal investigation. The details of how hackers got access to users’ funds are still unclear,” commented the officials. "The whole crypto community, be it a regulated exchange or a mixer, should deploy all the forces against cybercrime, as it's users who get affected in the first place. And as a service we must do whatever we can to protect funds that we've been entrusted with." |
|
|
|
We've made small, but very important update. Exchanging crypto to fiat commission was decreased to 3%. Enjoy  |
|
|
|
1. We are working with reliable third party partner, but anyway ALL exchanges are made using mixer, so they lose all connections.
But what if someone else's deposited funds are flagged as part of someone else's exchange and they request some verifications and other stuff? - I'm not sure about the exact method in regards to your mixing technique but is there a possibility for the above line to happen?2. RBF is working only with outgoing transactions, but you can use CPFP for both incoming and outgoing transactions.
Thank you for clarifying it  1. This is our partner. Therefore he will not ask anything and exchange is made by API, so you are dealing only with our platform. If you have any issues with exchange (but that never happened before), you can write here our our support and we will solve it. 2.  |
|
|
|
Maybe you can have a group with the channel so that potential clients can ask service related questions very easily and your mod or anyone from the core team can response to the group quickly. This is exactly link to this group  That's not a group but a channel where only admin can post. A group is where every one can make post and communicate to each others. :-D Gosh! I had to check twice to ensure that I was not worng LOL This is channel with the link to group  Here is direct link for your convenience – https://t.me/joinchat/VmC_FPy_Wtix61Qv |
|
|
|
We didn't face with such issues before. All our customers received their money in a few minutes. If you'll be the first luck person, who won't get paid, just send information to our group or directly to support and we will make a refund.
If you mean first unlucky person, than I hope not but I will hold you for your word. Problem I noticed is limited support only for Advcash cards that are still not available in many countries around the world, so it would be a good idea to support other card providers. Yes, exactly, I meant that We're working right now on adding more payment providers, including PayPal. Stay tuned |
|
|
|
Some question,
1. Why do you use CloudFlare TLS certificate?
2. Since it's wallet with mixer function, is it open source?
1. We use anti-DDOS protection powered by CloudFlare, therefore we need to use their TLS certificate. 2. No, we decided not to open our source code. |
|
|
|
Are those exchanges being made with the help of a third party?
I think it depends on your location and currency you are using, so for example when using EURO you have AdvCash and Payeer option, for USD there is only AdvCash and for RUB you can use credit cards, YooMoney and Qiwi. AdvCash has it's own debit cards but I am not sure if all countries are supported for their cards, and also keep in mind that service fee for selling Bitcoin directly from Blender is 5%, for example current rate is 1 BTC ≈ 56 434 USD but you would get around 53 612 USD. My question for OP is what happens if you sell Bitcoin, transaction gets confirmed but you never receive any money? Do we get any guarantees or refunds and how? We didn't face with such issues before. All our customers received their money in a few minutes. If you'll be the first luck person, who won't get paid, just send information to our group or directly to support and we will make a refund. |
|
|
|
|
