|
cr1776
Legendary
Offline
Activity: 4144
Merit: 1307
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 02:20:25 AM |
|
Using a third party service for more than a transaction always is a risk since someone else holds the keys. Particularly a service that provides no insurance. That said, it is too bad that they didn't do more to help.
|
|
|
|
|
bitmover
Legendary
Offline
Activity: 2408
Merit: 6188
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 02:53:41 AM |
|
The whole discussion in the article about 2FA resets is useless. Blockchain.com wallet clearly states that every user should save their seed (24 worda) in a piece of paper to properly back up your wallet. Saving passwords, 2fa, etc this is all pretty much useless, and the seed is all that someone needs in order to spend your funds. What is terrible with this history is that someone stolen his funds. The author even suggests blockchain. Com employees.... I wouldn't say it is impossible...
|
|
|
|
ranochigo
Legendary
Offline
Activity: 3038
Merit: 4418
Crypto Swap Exchange
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 03:33:38 AM |
|
I don't think Blockchain.com is always at fault. Most of the losses actually results from user's negligence and there is nothing that they can do.
But, of all the online wallets out there, Blockchain.com is likely one of the worst coded ones. The incident for which they pushed an untested update and resulted in the R values reused inadvertently was an amateurish mistake and unforgivable. If you don't want to lose your funds or suffer any headaches, steer clear of Blockchain.com.
|
|
|
|
Kong Hey Pakboy
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 1120
Merit: 68
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 03:40:10 AM |
|
I don't think Blockchain.com is always at fault. Most of the losses actually results from user's negligence and there is nothing that they can do.
But, of all the online wallets out there, Blockchain.com is likely one of the worst coded ones. The incident for which they pushed an untested update and resulted in the R values reused inadvertently was an amateurish mistake and unforgivable. If you don't want to lose your funds or suffer any headaches, steer clear of Blockchain.com.
Maybe if they made their services more functional and easy to use, I think that they can prevent such thing, the warning sign is just a fancy excuse that they do not want to take responsibility when their clients loss their wallets. As @ranochigo said, steer clear of Blockchain.com or any other online wallets, they will screw you over and they do not care if you lose your funds, buy a cold wallet and don't be dumb and careless with your credentials to access that wallet.
|
|
|
|
FinneysTrueVision
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 03:44:31 AM |
|
It does seem like it could be an inside job. Besides all the Reddit and TrustPilot cases there are similar stories that I have seen on Bitcointalk recently. There is no hard proof but if there has been an increase of similar cases they should really be doing more to look into what is causing this.
It is estimated that around a third of all Bitcoin transactions are made from Blockchain wallets. It is unfortunate that so many people are still using this wallet which has such a poor reputation.
|
|
|
|
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ████████▄▄████▄▄░▄ █████▄████▀▀▀▀█░███▄ ███▄███▀████████▀████▄ █░▄███████████████████▄ █░█████████████████████ █░█████████████████████ █░█████████████████████ █░▀███████████████▄▄▀▀ ███▀███▄████████▄███▀ █████▀████▄▄▄▄████▀ ████████▀▀████▀▀ █▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀BitList▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . REAL-TIME DATA TRACKING CURATED BY THE COMMUNITY . ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀List #kycfree Websites▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ |
|
|
|
avikz
Legendary
Offline
Activity: 3192
Merit: 1523
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 06:05:29 AM |
|
Shit happens when you trust someone with your money for such an asset where reverse transaction isn't possible! For bank, it is still somewhat safer because every banking transaction is reversible but that's not the case with bitcoin. Once a transaction is out of your wallet, there's no way to get back unless the receiver sends it back. Also there's no way to know the identity of that person due to the anonymous nature of bitcoin. In this case, the 2FA got changed using the form available with blockchain wallet owners only! So author's suspicion may be correct - it's an insider job! But if you have learnt the lesson, you will never use a third party wallet ever again!
|
|
|
|
20kevin20
Legendary
Offline
Activity: 1134
Merit: 1598
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 06:21:01 AM |
|
Definitely not the first time this happens. I've had my money blocked for an entire year since the password to my account has suddenly changed without me doing so.
Unfortunately, their support is completely useless. All they tell you is they just can't help you out since "they don't own the keys" - although I believe they do. If you lose access to your coins, without the seed they will be of no help..
|
|
|
|
|
davis196
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 06:58:18 AM |
|
I've had a mixed experience with blockchain.com in the past,so I wouldn't put big amounts on BTC in a blockchain.com wallet anymore.I wasn't scammed and I didn't lost any coins,but the account dashboard was confusing to me and some parts of the website were not functional(the problem wasn't in my browser). You can get and keep your private keys,but I'm not sure whether or not they have access to my private keys,which makes the whole process of keeping your private keys pointless.
|
|
|
|
Oshosondy
Legendary
Offline
Activity: 1554
Merit: 1167
Gamble responsibly
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 07:37:46 AM |
|
Right from the moment I have known about cryptocurrencies, the most wallet complained about is blockchain wallet, and most of the complains are list funds, but I can not say blockchain wallet official is responsible for this, but it is not a good wallet to use, it is a web wallet, web wallets are the most vulnerable wallet to attacks. Also, I can not say their officials are innocent, they might have a backdoor, but I am not certain about this. But not using the wallet is good, for online wallet, desktop wallets are the best, if not having computer, then going for mobile wallet is better.
|
|
|
|
joniboini
Legendary
Offline
Activity: 2296
Merit: 1802
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 09:05:36 AM |
|
let say if the site does not give any right as to recovery keys that means the security of the wallet rely on the user.
That should be the norm in crypto, but due to many users prefer the ease of use over security, things like a third-party to secure your wallet exists. For whatever reason people believe that trusting a third-party is a better idea than saving their own private key in a secure place inside their home, even if it means their funds can be locked without consent. Honestly, I hope people learn and stop using blockchain.com as a wallet, regardless of whether they fuck up or not. Time to learn and control your own funds.
|
| | . .Duelbits. | │ | ..........UNLEASH.......... THE ULTIMATE GAMING EXPERIENCE | │ | DUELBITS FANTASY SPORTS | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ████████████████▀▀▀ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | . ▬▬ VS ▬▬ | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ███████████████████ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | /// PLAY FOR FREE /// WIN FOR REAL | │ | ..PLAY NOW.. | |
|
|
|
NeuroticFish
Legendary
Offline
Activity: 3780
Merit: 6483
Looking for campaign manager? Contact icopress!
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 09:15:16 AM |
|
What is terrible with this history is that someone stolen his funds. The author even suggests blockchain. Com employees.... I wouldn't say it is impossible...
It's a web page. Nobody stops certain employees change its internals conveniently for 10 minutes to something that will also save/steal all that's needed to access the money later. You have to trust them that this will not happen (to you). Or you use a proper wallet, with much better change to find out in proper time if the version you've installer has problems. With bitcoin getting more and more expensive, more and more people will try to steal it. Is blockchain.com responsible? Hard to tell; one would have to undoubtedly prove it. And without that, their ToS pretty much makes them untouchable; if the user doesn't read nor understand it, too bad.
|
|
|
|
slaman29
Legendary
Offline
Activity: 2758
Merit: 1256
Livecasino, 20% cashback, no fuss payouts.
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 09:54:01 AM |
|
What is terrible with this history is that someone stolen his funds. The author even suggests blockchain. Com employees.... I wouldn't say it is impossible...
It's a web page. Nobody stops certain employees change its internals conveniently for 10 minutes to something that will also save/steal all that's needed to access the money later. You have to trust them that this will not happen (to you). Or you use a proper wallet, with much better change to find out in proper time if the version you've installer has problems. With bitcoin getting more and more expensive, more and more people will try to steal it. Is blockchain.com responsible? Hard to tell; one would have to undoubtedly prove it. And without that, their ToS pretty much makes them untouchable; if the user doesn't read nor understand it, too bad. Exactly! I've had a case before in our company also for one of our clients in the past. Back end guy changes the code for 5 minutes, takes everything in that 5. And then changes back the code. AND deletes the log for the code change (but he was finally caught because he forgot to delete one other log of him entering the system anyway.
|
|
|
|
BayAreaCoins
Legendary
Offline
Activity: 3962
Merit: 1250
Owner at AltQuick.com
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 09:57:12 AM |
|
Blockchain.com has had 2fa issues in the past. I found a major flaw in their system that would allow a hacker to disable their accounts on their exchange without needing to reauthenticate the 2fa. (Basically, you could turn 2fa off without having your 2fa code or device...) https://docs.google.com/presentation/d/1B7Edd-fj3wSegL2_JMwKBglPzk3pBG9DUVLuz3HPP-w/edit?usp=sharingThey fixed the problem and offered me $50 because they said they were already aware of the issue. Which is INSANE because they advertised "Military Grade Security" and were still allowed people to use their website to the tune of millions upon millions of dollars and bitcoins in customer accounts. (They wanted my social security for the $50 bug bounty for "trying"... lulz)
|
|
|
|
Bitstar_coin
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 10:28:21 AM |
|
Better to always have your funds in a wallet you have control of, there have been several similar cases still people haven't learn a thing or two, if you are not a day trader there is no need to keep your money in an exchange for too long, anything can happen and you can't blame the exchange for that.
|
|
|
|
The Cryptovator
Legendary
Offline
Activity: 2338
Merit: 2209
Crypto Casino and Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2021, 08:59:58 PM |
|
Blockchain claimed their service as a noncustodial wallet service. But I doubt it's not a true noncustodial wallet. It's pretty sure blockchain staff could see the wallet id and emails as well. To be more honest, even a site would code like this that staff would directly log in to the user account without a password. If the site isn't open-source we can't verify it and without a web developer expert who can read the code language, no one could detect it. So abusing the system is possible. But if there is an activity log on the admin system, then it's possible to detect who abuses the system. Because if someone scam by blockchain staff, then I think the user will not stay calm and eventually authorities would notice it. Anyway, I believe the story op mentioned on the thread is an issue of hacking. If someone would hack the email, means it's pretty easy to find the wallet id. Then hacker could change the email accordingly.
|
| | | | | | FIRST NO WAGERING BONUS CASINO & SPORTSBOOK SLOTS │ LIVE CASINO │ LIVE GAMES │ SPORTS | | | ► | WELCOME BONUS ─── UP TO ─── [ $500 ] | | ► | MULTI BET BONUS ─── UP TO ─── [ 200% ] | █████████████▄██▄ ████████████▐█████ ███▄██▄█████▐██████▄ ████████▄▄██████████▄ ███▐██▀██▀███████████ ██████████████████████▄ ███▐▄█████▄████████████▄ ▄▀▀███████████▄███████░█▌ ▀███████████████████████ ░███████████████████████ ░░▀▀▀▄██▄███████████████▄ ░░████▀█▀█████████████████▄▄ ██████▀███████████████████████▄ | PLAY NOW |
|
|
|
temporary-error-com (OP)
Newbie
Offline
Activity: 6
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 13, 2021, 07:28:05 PM |
|
The whole discussion in the article about 2FA resets is useless. Blockchain.com wallet clearly states that every user should save their seed (24 worda) in a piece of paper to properly back up your wallet.
How will recovery seed help if the funds are already stolen?
|
|
|
|
temporary-error-com (OP)
Newbie
Offline
Activity: 6
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 13, 2021, 07:34:52 PM Last edit: March 13, 2021, 08:40:12 PM by temporary-error-com |
|
Blockchain claimed their service as a noncustodial wallet service. But I doubt it's not a true noncustodial wallet. It's pretty sure blockchain staff could see the wallet id and emails as well. To be more honest, even a site would code like this that staff would directly log in to the user account without a password. If the site isn't open-source we can't verify it and without a web developer expert who can read the code language, no one could detect it. So abusing the system is possible. But if there is an activity log on the admin system, then it's possible to detect who abuses the system. Because if someone scam by blockchain staff, then I think the user will not stay calm and eventually authorities would notice it. Anyway, I believe the story op mentioned on the thread is an issue of hacking. If someone would hack the email, means it's pretty easy to find the wallet id. Then hacker could change the email accordingly.
Blockchain.com openly admits that they see wallet IDs and emails. This is how I was able to change my 2FA email back to previous. Actually it's quite possible that Blockchain.com found the thief, but did not notify the authorities, because such incident would be terrible PR for the company. They mostly likely only fired him, as they would do everything to hide it. There's no reason to change 2FA email if the email was hacked, because hacker would have access to the wallet already. And besides 2FA change takes few weeks. Also I have 2FA on my email and logs that prove that no one else accessed my email.
|
|
|
|
|