❗ [Security] Iwasang Gumamit ng Custodial Wallets, at iba pang Security Tips

[bL4nkcode]

Lumalakas ang panawagan natin sa lahat lalo na sa mga tiwalang tiwala sa Coins.ph hindi parin pala tapos ang ganitong aksidente ng pag hack at maraming nagsasabi na inside job daw ang nangyari.  Dahil mismong coins ang nagtext ng confirmation na nawithdraw ang pera nya sa BDO ngunit hindi nya naman ito ginawa. Sa lahat po ng may coins.ph hindi naman sa naninira ang post na ito, ito ay babala sa lahat ng mga gumagamit! Na maging maingat at maging sigurado dahil nga sabi narin ng ating mga highranks "NOT YOUR KEYS, NOT YOUR COINS".

This is not inside job, tingin ko lang, most probably phished account or any other hacking method used.
These happens talaga pag hindi activated 2fa, lahat ng account ko sa lahat ng exchanges famous man o hindi, laging mat 2fa except sa mga wallets ko since tago ko yung recovery phrase.
That's why I recommend lahat ng coins.ph user na i activate 2fa para iwas sa mga ganitong problema.

[1714178639]

1714178639

[1714178639]

1714178639

[1714178639]

1714178639

[1714178639]

1714178639

[1714178639]

1714178639

[1714178639]

1714178639

[Dabs]

Isa pa... use a separate email address if possible just for your crypto wallets. Use different emails for each site, pero ok lang siguro kung iisa lang for them. What I mean is, separate from your personal email address.

Hindi mahirap gumawa ng bagong email account, or gmail using any older android phone. Then activate mo 2FA for the gmail account as well.

So both gmail and your exchange accounts have separate 2FA... and no one else will know the email address you used kasi bago o hiwalay sa personal email mo.

Granted, hassle siguro, but better security, better separation, better compartmentalization .. whatever you call it, basta hiwalay.

Pati phone number ko for banks hiwalay sa personal number ko, and only for receiving SMS. Meron ako prepaid, and since I don't even reply on it, it costs me 10 pesos a YEAR....

[TheCoinGrabber]

No hardware wallet for me so Electrum lang na-try ko, nag-save ng kaunti. Nag-iiwan pa rin talaga ako sa Coins.ph ng panghold eh, para direkta na convert. So kayo ba nilalagay nyo pa sa ibang wallet yun and then saka nyo lang isesend sa Coins.ph kapag mataas na? Kasi hindi ba minsan nadedelay yung transaction, baka bago makapasok yung BTC bagsak na yung rate.

[mk4]

No hardware wallet for me so Electrum lang na-try ko, nag-save ng kaunti. Nag-iiwan pa rin talaga ako sa Coins.ph ng panghold eh, para direkta na convert. So kayo ba nilalagay nyo pa sa ibang wallet yun and then saka nyo lang isesend sa Coins.ph kapag mataas na? Kasi hindi ba minsan nadedelay yung transaction, baka bago makapasok yung BTC bagsak na yung rate.

Personally, nag iiwan talaga ako sa Coins.ph, para may pambili ako ng load. Besides that, wala naman. Mostly long term holder rin lang naman ako, nagsesell rin, pero paminsan minsan. Personally pag gusto ko magbenta ng konti pag tumaas ung price, simple lang naman; taasan lang ung transaction fee. Mas gusto ko na ung mag bayad ako ng $1-2 transaction fee para sure na safe ung funds ko, kesa iiwan sa custodial exchanges/wallets ung pera ko.

[Oasisman]

There's a good news coming from our very own Coins.ph, they added another layer of security, siguro dahil na rin sa mga concerns about unauthorized withdrawals/account hacking. Simula noong January 18, 2020 (I think that was the time when they required a mandatory app update) they added the OTP or One Time Passcode that will be sent to your registered email or mobile number, and the code will be inputted para ma complete ang any transactions . Though marami pa ring mga risks kapag nag store tayu ng Bitcoin or Php sa Coins.ph pero atleast medyo nadagdagan yung safety ng ating pundo.

Pero kung sa loading parang hindi na ata need ng OTP, kasi nakakapag load naman ako using their app sa messenger. I don't know kung required din ba yung OTP kung mag babayad ng bills, hindi ko pa kasi na try mag bayad ng bills through Coins.ph.

[TheCoinGrabber]

No hardware wallet for me so Electrum lang na-try ko, nag-save ng kaunti. Nag-iiwan pa rin talaga ako sa Coins.ph ng panghold eh, para direkta na convert. So kayo ba nilalagay nyo pa sa ibang wallet yun and then saka nyo lang isesend sa Coins.ph kapag mataas na? Kasi hindi ba minsan nadedelay yung transaction, baka bago makapasok yung BTC bagsak na yung rate.

Personally, nag iiwan talaga ako sa Coins.ph, para may pambili ako ng load. Besides that, wala naman. Mostly long term holder rin lang naman ako, nagsesell rin, pero paminsan minsan. Personally pag gusto ko magbenta ng konti pag tumaas ung price, simple lang naman; taasan lang ung transaction fee. Mas gusto ko na ung mag bayad ako ng $1-2 transaction fee para sure na safe ung funds ko, kesa iiwan sa custodial exchanges/wallets ung pera ko.

Kabado na tuloy ako. Siguro aantaying ko muna itong isang cycle na to. Kapag naibenta ko na to PHP, antay na lang ako ng dip, then saka ako magsend ng BTC sa Electrum.

There's a good news coming from our very own Coins.ph, they added another layer of security, siguro dahil na rin sa mga concerns about unauthorized withdrawals/account hacking. Simula noong January 18, 2020 (I think that was the time when they required a mandatory app update) they added the OTP or One Time Passcode that will be sent to your registered email or mobile number, and the code will be inputted para ma complete ang any transactions . Though marami pa ring mga risks kapag nag store tayu ng Bitcoin or Php sa Coins.ph pero atleast medyo nadagdagan yung safety ng ating pundo.

Pero kung sa loading parang hindi na ata need ng OTP, kasi nakakapag load naman ako using their app sa messenger. I don't know kung required din ba yung OTP kung mag babayad ng bills, hindi ko pa kasi na try mag bayad ng bills through Coins.ph.

Last week nagconvert ako ng XRP at ipinangbayad ko ng bill, parehong walang OTP. I guess kasi siguro if ever mag dispute na hindi ikaw yung naglabas ng pambayad eh pwedeng i-track kung sino yung account holder nung binayarang bill.

[cryptoMANIAC281015]

mas ok pa ren talaga ang mga HARDWAREwallets like ledger . makakasigurado kang safe yung mga naiipon mo .. pero kung walang budget para sa hardware wallet marami namang safe na wallet dyan. para sateng mga pilipino tulad ng ABRA wallet non-custodial sya so ikaw may hawak ng private key mo .

[Dabs]

Is there a way to export or see the private keys (or the seeds) using this ABRA wallet? I've never tried it. Ang siguradong sayo talaga ang private keys or seeds are Electrum and Bitcoin Core QT wallets. Yung iba, hindi ako sure.

[rosezionjohn]

Is there a way to export or see the private keys (or the seeds) using this ABRA wallet? I've never tried it.

Before you can use the wallet, you will be prompted to save your seed or recovery phrase.

Quoting from https://www.abra.com/blog/abra-recovery-phrase/

Step 1. Show your recovery phrase

There are several opportunities to have the app show you your recovery phrase, including when you first install the app, when you are reminded to verify your recovery phrase, and when you press the “Backup” button in the main menu of the app.

When you select the option to show your recovery phrase, you will be shown a screen with thirteen words to copy. These thirteen words are your recovery phrase. The recovery phrase is unique to your phone – no one else has a copy.

Post edit

I guess this is what you are really looking for

Quoting from https://support.abra.com/hc/en-us/articles/115003160508-Where-can-I-find-my-recovery-phrase-

Instructions for backing up your Abra wallet:

• Open your Abra app, to the main screen (now your portfolio view)
• Tap: the icon in the upper left corner to go to the menu screen
• Tap: 'Wallet Security'
• Tap: 'View recovery phrase'
• Write down your unique backup phrase and keep it in a safe place, such as where you would store other valuable documents and cash savings.
• Tap: 'Yes, I wrote it down'
• Write down the previous 13 random words from the previous step
• Tap: 'Confirm Phrase'

If you've made a typo, a red alert box will show on the app prompting you to check the phrase and try again.  If successful, you will see the next screen with a 'You are all set!' message.

[Dabs]

Where else can you use those 13 word phrase? Can you use it in Electrum or other wallets? Is it a standard format or specific for the ABRA wallet?

[Text]

Meron din kasing third party wallets na kahit nasayo yung seed phrase ay hindi naisasama yung address + private key ng another wallet. I mean, if you are trying to transfer or import funds from a wallet to another wallet. So parang wala rin.
The best pa rin kung private key talaga ng mismong public address at hindi yung seed phrase.


May sikat na namang pinagkakaabalan ang mga social media users ngayon yung "JuanCash". Basta basta na lang sila nag sasubmit ng personal informations/identifications for KYC kahit hindi naman ito verified o trusted na company.

[serjent05]

Meron din kasing third party wallets na kahit nasayo yung seed phrase ay hindi naisasama yung address + private key ng another wallet. I mean, if you are trying to transfer or import funds from a wallet to another wallet. So parang wala rin.
The best pa rin kung private key talaga ng mismong public address at hindi yung seed phrase.


May sikat na namang pinagkakaabalan ang mga social media users ngayon yung "JuanCash". Basta basta na lang sila nag sasubmit ng personal informations/identifications for KYC kahit hindi naman ito verified o trusted na company.

As far as I know JuanCash is from Zybi Tech company na nakareceive ng license from BSP way back 2018.  Hindi lang siguro popular sa  atin kasi maki coins.ph tayo.  But, I think they are legit company licensed by the authority to operate.  

You can check the information here and here.

Zybi Tech’s Juan Exchange received its license in 2018 and intended to launch a crypto exchange, a mobile wallet, and many other solutions concerning cryptocurrency and blockchain. The exchange had a grand launching last July 2019. BitPinas attended the soft launching last May.

[Bttzed03]

Another day, another exchange hack - Altsbit - an Italian CEX was hacked 
.....or exit scam. Who knows?! They said almost all funds were in their hot wallet and a small part are in their cold wallet
Tell me again why you are confident to use exchanges as your storage.

Kelan lang noong nakita ko thread na ito @OP, baka pwede isama as reference - Hacked Exchanges since 2011

[Text]

As far as I know JuanCash is from Zybi Tech company na nakareceive ng license from BSP way back 2018.  Hindi lang siguro popular sa  atin kasi maki coins.ph tayo.  But, I think they are legit company licensed by the authority to operate.  

You can check the information here and here.

Zybi Tech’s Juan Exchange received its license in 2018 and intended to launch a crypto exchange, a mobile wallet, and many other solutions concerning cryptocurrency and blockchain. The exchange had a grand launching last July 2019. BitPinas attended the soft launching last May.

Thanks for this, at least alam ko ng legit din ang company nila, at meron din silang sariling exchange. Pero for now, stick muna ako kay Coins.ph. Saka ko na siguro subukan ang service nila kapag well-establish kagaya ng growth ng Coins. Pero pansin ko na gumagawa na sila ng hakbang upang marecognize din sila ng mga crypto users gaya na lamang ng ongoing promotional events nila.

[serjent05]

Another thing, we all know na using VPN is a good way to protect our privacy pero, isa sa mga dapat nating tandaan na hangga't maari ay iwasan natin ang mga FREE VPN services.  Alam naman natin na karamihan sa mga nagsesetup ng VPN ay para kumita dahil ito ay isang negosyo.  Kung hindi tayo nagbababayad ng kanilang produkto paano sila kikita?Maari kaya na ang mga users nila ang kanilang produkto?

Narito ang mga links na pwede nating pagbasehan kung bakit napakahalagang umiwas sa mga free VPN's

5 Reasons You Need to Stop Using Free VPNs Right Now
7 Hidden Dangers to Using Free VPNs in 2020
Best free VPNs: 5 reasons why there are no such things


List of issues ng FREE VPN

• Your Security
• Tracking Your Online Activity
• Limiting the Amount of Data You Can Use
• Slowing Down Your Internet
• Bombarding You with Ads
• Selling Your Bandwidth

(Iclick para sa pagpapaliwanag ng mga issue)


Explanation:

Compromising Your Security
Tracking Your Online Activity

Limiting the Amount of Data You Can Use
Slowing Down Your Internet
Bombarding You with Ads

Selling Your Bandwidth


Images captured from: https://www.vpnmentor.com/blog/free-vpns-are-not-safe-to-use/

[Dabs]

If you're just going to use free VPNs, might as well stick to Tor. Yung talagang libre at halos walang problema. Minsan lang nga, mga ibang sites, ayaw nila na gumagamit ka ng Tor exit node, o alam na Tor ang ip address mo. Di bale, at least hindi ka parin ma trace.

You can also combine usage of both Tor and a VPN. At kung marunong ka, pwede ko kumuha ng VPS at gumawa ng sariling private VPN na ikaw lang ang may gamit.

[antoncoin222]

meron ako napanood sa youtube at saka meron nabasa online na may nag rereklamo tungkol sa abra na kesyo may mga restriction daw minsan hindi mo ma widraw pera mo papunta banks, di ko rin maintindihan bakit meron sila na mention na broker para sa abra..at mahirap daw e trace mga transaction history, ano kaya totoo safe kaya ang abra wallet?

[mk4]

Sorry sa late reply ngayon ko lang napansin.

meron ako napanood sa youtube at saka meron nabasa online na may nag rereklamo tungkol sa abra na kesyo may mga restriction daw minsan hindi mo ma widraw pera mo papunta banks,

Not sure kung pareho kami ng naging problema, pero ung withdrawal issue ko dati, nasa side ng banks, hindi sa side ng Abra. Isang phone call lang ang naging solusyon sa problema ko dati.

di ko rin maintindihan bakit meron sila na mention na broker para sa abra..

Not sure if na-gets ko ung gusto niyong sabihin. Abra itself is a broker.

at mahirap daw e trace mga transaction history,

As for transaction history, makikita mo naman ung listahan ng naging transactions mo. Ang problema lang is hindi ganun ka-detailed(walang nakalagay na tx ID, etc).

ano kaya totoo safe kaya ang abra wallet?

ung wallet ng Abra ay non-custodial, so ang security is nakasalalay sa gumagamit mismo. But regardless, hindi dapat ginagamit ang exchange para magstore ng funds. Lalo na ang coins.ph, kahit as far as I know never pa sila na-hack. It doesn't automatically mean na never sila mahahack.


Obligatory reminder na hindi ako affiliated sa Abra in any way; Abra user lang ako.

[antoncoin222]

Sorry sa late reply ngayon ko lang napansin.

meron ako napanood sa youtube at saka meron nabasa online na may nag rereklamo tungkol sa abra na kesyo may mga restriction daw minsan hindi mo ma widraw pera mo papunta banks,

Not sure kung pareho kami ng naging problema, pero ung withdrawal issue ko dati, nasa side ng banks, hindi sa side ng Abra. Isang phone call lang ang naging solusyon sa problema ko dati.

sir meron po ako tanong, meron po ba kayo alam mga kadahilanan kung bakit ang isang account ni blocked nila or hindi na ma open ng users?  2. posible kaya sa limit ng amount kung sobrang laki ng deposit mo o widraw kaya nila yon nagawa? magkano po kaya limit sa deposit at widraw nila..kasi user din po kayo ng abra siguro may idea ka kung anong mga problema sa abra hehe

[mk4]

sir meron po ako tanong, meron po ba kayo alam mga kadahilanan kung bakit ang isang account ni blocked nila or hindi na ma open ng users?  2. posible kaya sa limit ng amount kung sobrang laki ng deposit mo o widraw kaya nila yon nagawa? magkano po kaya limit sa deposit at widraw nila..kasi user din po kayo ng abra siguro may idea ka kung anong mga problema sa abra hehe

I think pag masyadong malaki ang deposit o withdrawal mo, most likely hihingi lang sila ng documentation na pang AML/KYC, pero hindi naman nila ilolock siguro.

Kung nalock man ung account mo ng di mo alam kung bakit, contact mo nalang sila kasi sila rin lang makakapagsagot sa tanong mo: https://www.abra.com/contact-us/