Will Blockchain.info ever get hacked?

[BitcoinBarrel]

Don't get me wrong, I love using Blockchain.info for an easy online wallet. But it's still an online wallet and NOT Bitcoin.

I try not to keep much on the site and only send/receive with imported addresses that I have the private keys to. What are your thoughts?

[1714631208]

1714631208

[1714631208]

1714631208

[1714631208]

1714631208

[achow101]

No service ever goes unhacked or not shutdown. Blockchain.info will definitely get hacked at some point and all of the (hopefully) encrypted wallet files will be stolen.

[Emerge]

No service ever goes unhacked or not shutdown. Blockchain.info will definitely get hacked at some point and all of the (hopefully) encrypted wallet files will be stolen.

No successful business goes without being attacked. Especially fin tech ones!
However they'll most likely find ways to keep it safe and refund or whatever

[Deep In The Mines LLC]

As far as I am aware the passwords are not stored in their service, instead they are encrypted with the password you chose, and you only decrypt your Blockchain.info wallet when you enter the password, and that's how you unlock your private key.

In this case, the wallets are stored in their servers, but they are all encrypted by the passwords people choose when they make said wallets.


Even in the case of the website having a full security breach - they still wouldn't be able to steal your wallet, unless you enter your password during the takeover, in which case they can take your money, but leaving your wallet there even during a full breach without logging into it would keep your money safe.

[avatar_kiyoshi]

Blockchain wallet service is has been hacked since over past 2 years ago, they wallet service has been removed from bitcoin.org wallet list. I have bad experience with their wallet service, so personally I don't like that wallet.
Online wallet is very vulnerable to get hacked.

I think this thread should move to service discussion.

[amacar2]

the wallets are stored in their servers, but they are all encrypted by the passwords people choose when they make said wallets.

I also think most of the wallets will be safer even if hacker become able to steal wallets stored in their servers because of encryption however they may brute force wallets with lots of bitcoin and may get success in decrypting it. So it is always advised not to put high amount of bitcoin in any online wallet or exchange also make proper backup of privatekeys of all the addresses you have in blockchain.info wallet to become able to use those bitcoins if they go offline.

[olubams]

Nothing is impossible but lets hope it does not happen not only to the millions of users fund on the platform but even to the Bitcoin world generally which might mean the crashing of the price which is even possible not to recover from anytime soon. I am sure blockchain.info is also aware of the threat surrounding them and I am sure they are mitigating against it...

[carlfebz2]

the wallets are stored in their servers, but they are all encrypted by the passwords people choose when they make said wallets.

I also think most of the wallets will be safer even if hacker become able to steal wallets stored in their servers because of encryption however they may brute force wallets with lots of bitcoin and may get success in decrypting it. So it is always advised not to put high amount of bitcoin in any online wallet or exchange also make proper backup of privatekeys of all the addresses you have in blockchain.info wallet to become able to use those bitcoins if they go offline.

If a hacker successfully hacked blockchain.info then they know already how to decrypt on those wallets because they wouldn't do such action if they know that they cant decrypt those wallet and their effort would come to waste for sure.Its really risky to put huge amounts on online wallet because the chances of being hacked is there.Keeping privates keys and other important informations on said web wallet.

[devans]

I am unsure if they meet your criteria, but blockchain.info has already been compromised on at least two occasions:

• A bug in blockchain.info's random number generator led to more than 250 BTC being stolen from wallets. Luckily the attacker was benevolent and returned the funds.
• blockchain.info's domain name was hijacked. This allowed the attacker to serve arbitrary code to users and potentially steal funds, though I don't know if it happened in this case.

[Barbut]

As far as I am aware the passwords are not stored in their service, instead they are encrypted with the password you chose, and you only decrypt your Blockchain.info wallet when you enter the password, and that's how you unlock your private key.

In this case, the wallets are stored in their servers, but they are all encrypted by the passwords people choose when they make said wallets.


Even in the case of the website having a full security breach - they still wouldn't be able to steal your wallet, unless you enter your password during the takeover, in which case they can take your money, but leaving your wallet there even during a full breach without logging into it would keep your money safe.

Thanks for this! I didn`t know how everything works with chosen password, you gave me good insight into this. I use blockchain.info from the beginning and except few times when I couldn`t log in on the site (explanation from them was upgrading the system or something similar every time) everything was good.
I still use that wallet for many things, and its good, and their mobile app is simple and easy to use. By the way I hope they will not be hacked ever never.

[AT101ET]

Some people will make you believe that it's not possible. This is most certainly not true. It's unlikely, but very possible. Look at MtGox for example.
The same goes for all online wallets. You are at risk of big site wide hacks as well as more personalised fishing attempts. The rule is the same for all online wallets. Only keep what you need there. Keep the rest offline and safe

[lolxxxx]

I don't think so that it will get hacked because they don't store our passwords and we have full control of our wallets. Only their is one way to hack is the secret sentence. If hacker wants to hack blockchain.info then they will have to hack the private key of the address otherwise Blockchain.info is not going to hack (I Believe) .

[MadGamer]

I don't think so that it will get hacked because they don't store our passwords and we have full control of our wallets. Only their is one way to hack is the secret sentence. If hacker wants to hack blockchain.info then they will have to hack the private key of the address otherwise Blockchain.info is not going to hack (I Believe) .

Maybe they don't store our passwords in their servers but they definitely store the wallet.dat files and someone who could get to those , could have access to the coins eventually.
Blockchain.info have at the moment over 10 million wallet and the chances that the hacker is not going to be able to crack any of them is very unlikely , he will at least be able to hack a few thousands with weak passwords and get his hands on BTC.

[Zadicar]

I don't think so that it will get hacked because they don't store our passwords and we have full control of our wallets. Only their is one way to hack is the secret sentence. If hacker wants to hack blockchain.info then they will have to hack the private key of the address otherwise Blockchain.info is not going to hack (I Believe) .

Maybe they don't store our passwords in their servers but they definitely store the wallet.dat files and someone who could get to those , could have access to the coins eventually.
Blockchain.info have at the moment over 10 million wallet and the chances that the hacker is not going to be able to crack any of them is very unlikely , he will at least be able to hack a few thousands with weak passwords and get his hands on BTC.

You have a point that wallet.dat could be compromised and the hacker could possibly get thousands of wallets but i dont think they could able to get all of those because we all know there are millions of wallet on blockchain.info has been stored but one thing that bothers me that on how they gonna cracked those wallets?

[digaran]

Not if they constantly monitor their systems and keep their firewalls and anti viruses up to date, if no one from the inside leaks anything.
You should know that everything is somehow vulnerable to hacks and unauthorized access no matter if it is a bitcoin web wallet or NSA database .

[BitcoinBarrel]

I can see it now....

You trusted millions of dollars on a website with a .INFO extension!?

  lol

[Deep In The Mines LLC]

the wallets are stored in their servers, but they are all encrypted by the passwords people choose when they make said wallets.

I also think most of the wallets will be safer even if hacker become able to steal wallets stored in their servers because of encryption however they may brute force wallets with lots of bitcoin and may get success in decrypting it. So it is always advised not to put high amount of bitcoin in any online wallet or exchange also make proper backup of privatekeys of all the addresses you have in blockchain.info wallet to become able to use those bitcoins if they go offline.

If a hacker successfully hacked blockchain.info then they know already how to decrypt on those wallets because they wouldn't do such action if they know that they cant decrypt those wallet and their effort would come to waste for sure.Its really risky to put huge amounts on online wallet because the chances of being hacked is there.Keeping privates keys and other important informations on said web wallet.

Web wallets getting hacked are generally from owner/high-level employees being infected, or a 0day exploit being used to gain entry, and no they wouldn't already know.

Gaining access and gaining bitcoins in Blockchain.info's case are two different scenarios, unlike exchanges which usually store both the password and the in-many-cases (unencrypted wallet) that you only login to your account with a password while the wallet itself is unencrypted or all money is moved into one massive wallet which seriously increases the risk of everyone losing their coins.

In blockchain.info, even if the service itself gets hacked completly and taken over, they still wouldn't be able to take any bitcoins without first figuring out the password through bruteforce (terrible way unless the password is part of the dictionary!) or waiting for the users to enter their password (likely scenario)

If blockchain.info gets hacked by smart people they would probably keep a low profile until get accumulate enough passwords and then run with the wallets in that 1 week span of low-profile or around that time.

[noictib]

Don't get me wrong, I love using Blockchain.info for an easy online wallet. But it's still an online wallet and NOT Bitcoin.

I try not to keep much on the site and only send/receive with imported addresses that I have the private keys to. What are your thoughts?

In my opinion there are no chance of hack of wallet if we are have with wallet of strong password . And don't forget that if we forget own password than we will loss our wallet for lifetime , if we have not exported our private key .
But I think if we don't use blockchain but we are using only private key at another wallet , then there is chance of hacking because in the Bitcoin we can trust most at only official wallet . Other wallet may give some doubt of ddos attack .

[Patatas]

Don't get me wrong, I love using Blockchain.info for an easy online wallet. But it's still an online wallet and NOT Bitcoin.

I try not to keep much on the site and only send/receive with imported addresses that I have the private keys to. What are your thoughts?

Shouldn't this be moved to Service Discussion ?

On Topic,the short answer is Yes! They've been ddosd a several times that shows their servers are prone to remote bots.But hey,what could the hackers have access to ? They don't store private keys on their servers I think.Without having the login identifiers,there isn't much hackers can do.Passwords can be leaked but login identifiers are only generated and sent once making the system less vulnerable.

[arwin100]

Don't get me wrong, I love using Blockchain.info for an easy online wallet. But it's still an online wallet and NOT Bitcoin.

I try not to keep much on the site and only send/receive with imported addresses that I have the private keys to. What are your thoughts?

In my opinion there are no chance of hack of wallet if we are have with wallet of strong password . And don't forget that if we forget own password than we will loss our wallet for lifetime , if we have not exported our private key .
But I think if we don't use blockchain but we are using only private key at another wallet , then there is chance of hacking because in the Bitcoin we can trust most at only official wallet . Other wallet may give some doubt of ddos attack .

nope that doesn't guarantee at all that we can make sure that we are safety if we just used strong password since there are some sort of vulnerabilities to our accounts eventhoug we do that thats why we need to secure it properly and used some sort of security measure, and as far as i remember they have been attack for those back days and blockchain been hit by series of ddos attack.,