Blender.io - Advanced privacy for Bitcoin transactions (mixer)

[rhomelmabini]

Blender.io is a mixer, and a mixer is not a web wallet. It is what it is=> a mixer. The vulnerabilities you're thinking about with a web wallet don't exist with a mixer. Mainly because there is no account that you can create.

As for your question with a Tor version, it's written with big red letters in the original post

I think he's referring to this https://blenderwallet.io/en/ and it's new since there's a new campaign opened on the Services board and it connects here in this thread. Hope it is clear now!

By the way, this is the Tor site for the blenderwallet: http://blenderwal4qsydi.onion this address is available once you create your wallet on the top-left corner of the web wallet.

[1714039270]

1714039270

[1714039270]

1714039270

[1714039270]

1714039270

[1714039270]

1714039270

[SquirrelJulietGarden]

I tested to create my wallet (do it with Tor)

- Create account
- Set up mnemonic passphrase (choose create encoded mnemonic)
- Get 24 mnemonic seeds
- Enable 2FA (or skip and create wallet).
- Save 4 codes to unlock wallet (if 2FA is lost).
- Finish.

- Login wallet
- Create BTC wallet: 2 types of wallet Segwit address (3) or Segwit native address (bc1). Only 2 types and there is no wallet for Legacy address.

[LeGaulois]

@rhomelmabini

Alright, I didn't know about this campaign going on and redirecting here, I didn't see an announcement. I believe the wallet deserves its own topic or at least the original post should be updated with some information.

@blenderio

What was your motivation for creating a wallet compared to the mixer?

@SquirrelJulietGarden

Shoot some screenshots if you can please

[Daltonik]

Official statement from a Blender Wallet representative regarding the spreading information about scammers offering to increase your BTC with Blender Wallet:

"Today, we began to receive requests about multiplying bitcoins with the help of Blender Wallet.
Those who distribute or sell such ideas are scammers.
We did not declare such functionality. And multiplying BTC in the blockchain is technically impossible.
Be careful."

[Daltonik]

Blender Wallet added the cancellation of the transaction in a single click Replace-By-Fee.

Replace-By-Fee works based on the transaction prioritization mechanism:

1. The user sent 1 BTC and set a commission of 0,00001 BTC.
2. Miners did not include the transaction in the next block, because they prioritized transfers with a higher commission.
3. The user used RBF to speed up the transaction: Once again, I sent 1 BTC to the same address, but with a commission of 0.00002 BTC.
4. Miners included the second transaction in the block.
5. The bitcoin network removed the first transaction from the mempool.

[condoras]

I believe the wallet deserves its own topic or at least the original post should be updated with some information.

I totally agree with wallet having its own thread, it's a different service after all.

Official statement from a Blender Wallet representative regarding the spreading information about scammers offering to increase your BTC with Blender Wallet:

"Today, we began to receive requests about multiplying bitcoins with the help of Blender Wallet.
Those who distribute or sell such ideas are scammers.
We did not declare such functionality. And multiplying BTC in the blockchain is technically impossible.
Be careful."

Can an official representative post here about it as well?

[Bitcoin_Arena]

I was a little confused on which thread I should post regarding this wallet. I just checked it out and It has quite a number of features including 2FA.
I have an itching question. a web wallet as of today and we know that anything can happen with such wallets like website going offline.
Is it possible to use the seeds generated from the same wallet to recover funds in other wallets like electrum?

[SquirrelJulietGarden]

I was a little confused on which thread I should post regarding this wallet. I just checked it out and It has quite a number of features including 2FA.
I have an itching question. a web wallet as of today and we know that anything can happen with such wallets like website going offline.
Is it possible to use the seeds generated from the same wallet to recover funds in other wallets like electrum?

Blender.io team created their tumbler service and later, months ago they created the Blender wallet. It allows you to use 24 mnemonic seeds (not 12)

Blender wallet supports many BIPs and I think you can import Blender wallet to Electrum.

In Electrum, you must click on Option, choose BIP39. I tested it and can import it to Electrum with seed from Blender wallet.

https://wallet.blenderwallet.io/en/faq

What BIPs do you support?
BIP32
BIP39
BIP44
BIP49
BIP69
BIP84
BIP125
BIP141
BIP143
BIP144
BIP173

[Chikito]

I just checked the wallet use BIP39 mnemonic phrase. - we can restore it to BIP39 Wallet List


This warning for beginners , they must be careful when creating a wallet because the Mnemonic passphrase appears in the first step.



If the beginner forgot to keep that passphrase, they will be lost the fund even keep 24 mnemonic seeds. that's for an advanced user, I think it better to put that option after the 24 mnemonic seed created as another wallet did. (this warning if the website to be offline and they want to restore it to another wallet i.e. electrum and hardware wallet, they will get a different address if forgotten Mnemonic passphrase )

example

24 mnemonic seed

Code:

grass warfare monster drama draw aware lunch wing timber young brand crane layer embrace hint conduct sister absent economy family offer toy luggage program

this address without Mnemonic passphrase

Code:

bc1qtfwe8zpv4d7cqgsgxwd8ymg5xryx9l2sqra6h8
bc1qffuv2quse3hru8n6cwt6trl6amdntfardq3nj0
bc1quezk69v3dgxqsjkhjljzklfx9dkmw8zyurh6dk

this address with Mnemonic passphrase

example Mnemonic passphrase: Phrase23@

Code:

bc1qzqtvp4xc6sqrv2t5s2p4tlf3n4e4deymzhcjjv
bc1qe7sea7l260q2tsanwuvwsc90pk5qjfwqzztusz
bc1qca0h0ryftr32pt0y5qkqd225qptxszkwa2khpt

Please read the meaning of Mnemonic Passphrase

1. https://coinsutra.com/mnemonic-passphrase/
2. https://cryptoadventure.org/everything-you-need-to-know-about-mnemonic-passphrase/

I just checked it out and It has quite a number of features including 2FA.

About 2fa so far so good, I got the correct address even I used with or without 2fa when I restore it to another wallet.

It allows you to use 24 mnemonic seeds (not 12)
Blender wallet supports many BIPs and I think you can import Blender wallet to Electrum

the problem is we can't restore from another wallet to Blenderwallet.

the wallet just allowed import or restore by created from Blenderwallet only.

[adamvp]

I would like to ensure myself:
Is blender.to the same site as blender.io but under another domain? Or they are separate "clone" sites?
0.0003 BTC fee is for first address, too. So if someone want to mix 0,001btc they will have over 30% fee?

[Slow death]

I would like to ensure myself:
Is blender.to the same site as blender.io but under another domain? Or they are separate "clone" sites?

I think they should be separate because we are talking about a wallet (it is not necessary to have a high level of privacy as a mixer should have) and a mixer site (which involves privacy)

but you can ask this here:

https://blender.to/contacts

0.0003 BTC fee is for first address, too. So if someone want to mix 0,001btc they will have over 30% fee?

I don't understand this fee issue either, for further clarification I suggest you send PM to @blenderio or use the contacts on the site:

https://blender.to/contacts

I haven't tested whether their telegram is working or not because I'm not currently using a telegram

[fian18]

I would like to ensure myself:
Is blender.to the same site as blender.io but under another domain? Or they are separate "clone" sites?
0.0003 BTC fee is for first address, too. So if someone want to mix 0,001btc they will have over 30% fee?

Just look subject. Real link - blender.io (with IO). Blender.to is fake.

[LeGaulois]

I would like to ensure myself:
Is blender.to the same site as blender.io but under another domain? Or they are separate "clone" sites?
0.0003 BTC fee is for first address, too. So if someone want to mix 0,001btc they will have over 30% fee?

Just look subject. Real link - blender.io (with IO). Blender.to is fake.

Fake news, don't spread false information

Have you ever visited the website or read the original post?
https://blender.to is a mirror site of https://blender.io
it is marked right next to the logo at the top of the page. The URL is also mentioned in the 1st post of this thread

Our websites are:
blender.io
blender.to
blenderiocpxfema.onion

[shark_1]

Allegedly their product "Blender Wallet" was hacked and they claim 100 BTC were stolen: https://bitcointalk.org/index.php?topic=5335884.msg57299512#msg57299512

June 22, 2021 – Non-custodial crypto wallet Blender Wallet has been hacked. The hackers withdrew the amount of 100 BTC in total.

As a non-custodial service, Blender Wallet doesn’t store data about users on servers. The Blender Wallet team has immediately disabled registration and access to the wallets to  protect users’ funds and make sure that newly generated seed phases won’t get in hacker’s hands.The executives promise to cover the losses from Blender Mixer’s reserves. Every user who has lost the money due to the hack will get the exact amount of money on their balance. Further information on compensation will be available at https://blenderwallet.io and @BlenderWalletio_English Telegram channel.

“Over the course of investigation, we promise to figure out how hackers managed to hack a non-custodial solution, as we don’t store any data granting access to users’ balances on our servers. We initiated an internal investigation. The details of how hackers got access to users’ funds are still unclear,” commented the officials. "The whole crypto community, be it a regulated exchange or a mixer, should deploy all the forces against cybercrime, as it's users who get affected in the first place. And as a service we must do whatever we can to protect funds that we've been entrusted with."

It's unclear how this is possible if it's really a "non-custodial wallet" as stated. They blocked access to all wallets and ask to send seed phrase and passwords to an email address to get a refund. Almost no communication so far. Highly suspicious!

Very sad. Service was working really well in the past year.

[fahq]

@shark_1 Have you heard anything back from anyone yet? I have a couple friends that were hit in this hack and they both said they haven't heard anything.

If this was a scam then I would suggest people not using their tumbler service until those owed were reimbursed!

[blenderio]

Allegedly their product "Blender Wallet" was hacked and they claim 100 BTC were stolen: https://bitcointalk.org/index.php?topic=5335884.msg57299512#msg57299512

It's unclear how this is possible if it's really a "non-custodial wallet" as stated. They blocked access to all wallets and ask to send seed phrase and passwords to an email address to get a refund. Almost no communication so far. Highly suspicious!

Very sad. Service was working really well in the past year.

We're right now investigating how that happened. Soon we will update information.

Anyway Blender Wallet is responsible for this leak and right now is compensating all of losses. You can check in official telegram chat:
https://t.me/Blenderio_English

[blenderio]

After updating the Tor browser started showing a warning that it is necessary to switch from when V.2 onion addresses (standard short ones, for example blenderiocpxfema.onion) to the new V.3 address format (new long ones).
It doesn't affect service's functionality.
Click on the Got it button and continue using our usual address blenderiocpxfema.onion
We will inform you additionally about the change of the address to the new format.

[dkbit98]

Are there any official status updates from Blender team?
I see that website is now working on both clearnet and tor version but blenderwallet website is still showing attack information and it is not functional at all.
Have all funds been recovered to affected customers or not, and is it safe to use Blender service or not?
I will write a warning feedback until this situation is clarified.

[TryNinja]

Just saw this on twitter. Can you confirm/deny?

Large #Bitcoin  mixer, http://blender.io had 1 day of logs leaked, containing information on individual who were likely attempting to launder funds that day.

Some of the information that leaked is the encrypted seed phrase to wallets and the transaction IDs.

[JeromeTash]

-snip-

Their situation seems to be getting from bad to worse if this is true. Just last month, they claimed their wallet (Blender wallet) which i believe is part of them got hacked and 100 BTC was stolen

June 22, 2021 – Non-custodial crypto wallet Blender Wallet has been hacked. The hackers withdrew the amount of 100 BTC in total.

As a non-custodial service, Blender Wallet doesn’t store data about users on servers. The Blender Wallet team has immediately disabled registration and access to the wallets to  protect users’ funds and make sure that newly generated seed phases won’t get in hacker’s hands.The executives promise to cover the losses from Blender Mixer’s reserves. Every user who has lost the money due to the hack will get the exact amount of money on their balance. Further information on compensation will be available at https://blenderwallet.io and @BlenderWalletio_English Telegram channel.

“Over the course of investigation, we promise to figure out how hackers managed to hack a non-custodial solution, as we don’t store any data granting access to users’ balances on our servers. We initiated an internal investigation. The details of how hackers got access to users’ funds are still unclear,” commented the officials. "The whole crypto community, be it a regulated exchange or a mixer, should deploy all the forces against cybercrime, as it's users who get affected in the first place. And as a service we must do whatever we can to protect funds that we've been entrusted with."

They said that they were in the process of refunding the victims, but if this can happen to a mixer and their wallet. I don't think it gives any much confidence using their services at this point.