can blockchain.com be hacked?

[sheenshane]

Blockchain.com does not control your fund like typically exchanges do. Just make sure you copy your seeds/private keys and store somewhere safe just in case something bad happens to the company.
I think the Centralized nature of Blockchain.com wallets make it vulnerable to hacking. If in any case this happens you can simply move your seed to other wallet.

Indeed, any web wallet has been not safe at all or any online wallet. Even electrum, that isn't a web wallet and that is hardware wallet but still can be attacked by the DDoS. If you have a big amount of bitcoin I think the best wallet to store is an offline wallet which is very far from hacking incidents. Then if that small amount you can store it on the web wallet, maybe no one hackers get interested if you only store 50 dollars value on your wallet.

[reallester]

Even electrum, that isn't a web wallet and that is hardware wallet but still can be attacked by the DDoS.

No, Electrum isn't hardware wallet, no physical. Electrum as software wallet can be safe than webwallet like blockchain.com.

[o_e_l_e_o]

No, Electrum isn't hardware wallet, no physical. Electrum as software wallet can be safe than webwallet like blockchain.com.

Electrum itself isn't a hardware wallet, but it is very easy to use Electrum as an interface for a hardware wallet such as a Ledger or Trezor, and indeed many users do this. This is probably the safest way to use Electrum short of running it on an air-gapped machine. There are also very insecure ways to use Electrum, such as with a weak password and by backing up your wallet.dat file to the cloud or your email.

A web wallet will always be very insecure. A software wallet can be very insecure or very secure, depending on how well you use it.

[PrimeNumber7]

blockchain.com hosts a non-custodial wallet service. they don't "hold" your BTC. that's why they can't recover your wallet for you if you lose your key/password. your seed can be used to recover your coins to any other HD wallet.

In theory, someone could hack their website to change the javascript on the website so that anytime a blockchain.com wallet is accessed, the xprivkey will be transmitted to the hacker, or blockchain.com could make this change and the private keys would be sent back to their servers.

I suspect this type of hack would be very short lived, and their wallet service would be quickly shut down once discovered.

[RapTarX]

Of course it can be. Till now, a lot of exchange has been hacked. Cryptopia and Binance is the earlier one. They used to have more security. But still they have been hacked. On the other hand, your account is an online one which can easily be hacked.

[onecall123]

One of the popular questions we get multiple ways per times! Just because something provides regular upgrade on their security system, doesn't mean at all could not be hacked. Even reputation means not a lot. There's always a way any wallet could get compromised, like blockchain.com or so.

[FoBoT]

No online website is entirely safe from hacking attempt especially when it run automatically and store its goods/services both digital and physical stuffs online can be hacked.
Cryptocoins are better safe offline.

[bxmail]

Skycity Aug 27, 2019 22:50 EDT

This morning I found my BTC balance 0. But it must be 0.035 BTC on it (about 350 USD).
What happened? I did not send anything or even accessed my BTC wallet.
Please HELP.


   
Greg (Blockchain)

Aug 28, 10:13 EDT

Hello,

I'm very sorry to hear about this. You may have some type of malware on your computer that resulted in your funds being stolen because your private information was somehow obtained. One of the most common types of these are browser extensions posing as bitcoin price tickers that are actually stealing your account information. There's also the possibility that you visited a phishing site posing as Blockchain. We've also heard of computer viruses that detect when an address is in your clipboard, and replace the one you wanted to use with an address controlled by this malicious party.

By design, Blockchain never has access to users' accounts or funds. If you keep your password and private key backups secure, then your funds are always safe with us. Since this information has been compromised, be sure to never use this wallet or any addresses contained within it. I'd also highly advise against using the same password again. I'm truly sorry that you had funds stolen from you. That certainly is an extremely frustrating experience.

If you?d like to learn more about how our wallet works, please visit: https://www.blockchain.com/learning-portal/wallet-faq.


Skycity Aug 28, 2019 23:54 EDT

Hello,
None of what you mentioned really occured, it was probably a breach in your security system. And, yes, again as you mentioned, that certainly was an extremely frustrating experience. But what is more frustrating is that you hold no responsibility. I was totally sure that my funds would be safe with you, blockchain.com wallet was chosen, because I trusted you.
But this is the point where trust ends.
That was not my fault. My computer is always double-checked and secure, and I never visit phishing sites or extensions. Such response from you, no help or compensation offered from your side, makes it even more frustrating.
I will never use again and will discourage other people to use your service.
I am also going to make this situation and our conversation public.

Sent: Wednesday, August 28, 2019 at 5:13 PM

[o_e_l_e_o]

I'm afraid this is almost certainly a breach on your end, not theirs.

Blockchain.com, like all other web wallets and exchanges, store all their customers' funds in one or two central wallets, and simply display your individual balance by updating a database. Had their central wallet been hacked, firstly your balance wouldn't have changed, and secondly, it would be all over the news.

There are many ways your coins could have been stolen. In addition to those methods mentioned in the email you received (malware and phishing sites, which are both very common), you also have to consider if you used a weak password, reused the same password across multiple sites, logged in on a public computer, and so forth.

Blockchain.com will hold no responsibility here. Here is an extract from the terms you accepted when you signed up to their wallet:

You agree to take responsibility for all activities that occur with your Wallet and accept all risks of any authorized or unauthorized access to your Wallet, to the maximum extent permitted by law.

Unfortunately, there is nothing that you can do here. Your coins are gone. Take this as a lesson to never again trust a third party to hold your coins on your behalf, and instead learn how to safely and securely hold your own coins.

[BitMaxz]

~snip~

What blockchain wallet you use the mobile app or directly from the blockchain website?

Do you have two-factor authentication or 2FA? Do you whitelist only your IPs?

If you have this it's impossible for someone to login to your account and stole your BTC even you've phished unless if your secret key from 2FA is compromised and you are using the same password as Gmail account(Without 2FA). If they can access your Gmail they can easily retrieve information from your blockchain account by using "Remind me"(Wallet ID) or "Reset 2FA" and use the same password that you use from the phish sites.

Or if you are using the mobile blockchain wallet your phone might be monitored or remotely use by someone to get your 2FA and password from your phone.

Or possibly someone knows your blockchain seed phrase. Where do you save your seed phrase? If you just save it somewhere on your PC or phone (Might be infected) maybe someone stole your saved seed phrase and use it to recover the wallet from blockchain.

Try to ask blockchain support about login IP history to check if there is different IP login into your account.
If there is a different IP then someone has access to your Blockchain account but if none it might be a blockchain bug.

[bustedsynx]

A website can be hacked. In fact any device connected to the Internet can be hacked. Now an offline wallet stored in a vault, without any connection to the Internet would be virtually impossible to hack.

That's why exchanges practice the cold wallet storage since it cannot be hacked. Their sites are open to attacks and attacks happen every day.

[dunfida]

Hello,
None of what you mentioned really occured, it was probably a breach in your security system. And, yes, again as you mentioned, that certainly was an extremely frustrating experience. But what is more frustrating is that you hold no responsibility. I was totally sure that my funds would be safe with you, blockchain.com wallet was chosen, because I trusted you.
But this is the point where trust ends.
That was not my fault. My computer is always double-checked and secure, and I never visit phishing sites or extensions. Such response from you, no help or compensation offered from your side, makes it even more frustrating.
I will never use again and will discourage other people to use your service.
I am also going to make this situation and our conversation public.

Blockchain doesnt hold or does know your keys and its your total responsibility on holding and keeping it away from others awareness for your wallets safety.
If funds being hacked or stolen then the only possible ways or reason is only on that keys alone.Someone do able to access it neither by phishing or some malware.
There are instances that no matter how sure we believe that it isnt the reason but actually it did happen.

[dkbit98]

You should read this topic and see how Blockchain wallet can be hacked:
https://bitcointalk.org/index.php?topic=5185385.0

[judeafante]

can they be hacked, and the funds stolen, do they have a special wallet where they keep all the btc ? how do they work exactly?

can they suddenly decide to hold your btc, or restrict you or prevent you from sending or receiving bitcoin ? if you don't provide id or for whatever reason ?

do you own your btc (menmonic) with them or is it in their control?

thanks

I never trust an online wallet I'm only using it as a spare wallet and people should not put all their coins on this kind of wallet, if their is always update on the system. the hackers are also employing the best technology to hack these online wallets, we can never be 100% sure to have a peace of mind a hardware and a desktop wallet is always recommended, these two are created for maximum safety and because online wallets are not always secure.

[bL4nkcode]

I never trust an online wallet I'm only using it as a spare wallet

That's why people are still getting scammed and/or hacked because of behavior like this, you never trust but you still use it, seriously?

[Mahanton]

I never trust an online wallet I'm only using it as a spare wallet

That's why people are still getting scammed and/or hacked because of behavior like this, you never trust but you still use it, seriously?

Using it as a spare would already be considered since he dont trust it up he do only put up a small amount and already ready on what would happen later on if they got hacked.
There were other web-wallets we do know but we cant deny the fact that we do still consider up on using up this wallet which is way more preferable than to those unknown
wallet online.We know the current reputation of blockchain so i cant blame others for them to consider it.