Does exposed wallet addresses carries any possible risks?

[Somegory]

I don't know the perfect place for this topic to be, if you have a better place on mind you can help figure it out.

I have been using cryptorank.io to monitor my crypto portfolio, simply as watch only kind of operation.
Today they send me this disturbing message.



While many will say it shouldn't bother me just like a friend said, I want to know for sure if it is something that I shouldn't be worried about, my email address is now known with my wallet address.

The question in mind is if your address is know to hold $7000 worth of Bitcoin and alternative coins is there is possible dangers that I should be on the lookout for?

Does wallet addresses alone carries some risks when they aren't empty and exposed this way?

[Upgrade00]

The email address is the risk you're exposed to, you can receive personalized phishing links there. Scammers will try to get you to panic and make a mistake that can lead to you sending them actual sensitive personal information.

Your address being exposed doesn't pose a security risk. Many users here are on campaigns with their addresses in a public spreadsheet. A dust attack can be attempted, to try and get an idea of any other wallets you own but that also doesn't expose you to any further risk.

[Charles-Tim]

Also be careful of dusk attack and address poisoning. You should read about the two. Check and recheck the addresses that you are sending coins to before sending the coins.

Also be careful of phishing attack which Upgrade00 has posted above.

Advice:
Do not use emails on these sites. I always avoid using email and I do not set up any portfolio. I am wondering how some people like portfolio of a thing. I can easily know the coins that I am having.

[Nwada001]

Also be careful of phishing attack which Upgrade00 has posted above.

Phishing attacks are one thing here, but the op should also be very vigilant for social engineering scams since the email is exposed; scammers can try to create a friendly contact with the op, which he might not be expecting. Once they have targeted someone, they can use any tactic. To me, if the email the op used is not linked to some other personal life stuff he should abandon it entirely.

[Moreno233]

I don't know the advantage of using this third party website to monitor your portfolio even though you set that up as watch only wallet. I feel it is even risky to expose your wallet that much becaise you may be opening yourself up as a target for phsishing and other forms of attacks. As a matter of urgency, discontinue using that service and if possible, transfer your money out of that exposed wallet that have been tied to your email.

[Charles-Tim]

Phishing attacks are one thing here, but the op should also be very vigilant for social engineering scams since the email is exposed; scammers can try to create a friendly contact with the op, which he might not be expecting. Once they have targeted someone, they can use any tactic. To me, if the email the op used is not linked to some other personal life stuff he should abandon it entirely.

Yes, that is what Upgrade00 posted about phishing attack. Somegory can read more about phishing attack and how to avoid them.

The advise people tell is that people should dispose the email, but anyone that has the knowledge about phishing attacks can easily know  that they are phishing attacks.

I don't know the advantage of using this third party website to monitor your portfolio even though you set that up as watch only wallet. I feel it is even risky to expose your wallet that much becaise you may be opening yourself up as a target for phsishing and other forms of attacks. As a matter of urgency, discontinue using that service and if possible, transfer your money out of that exposed wallet that have been tied to your email.

It is not a watch-only if it is a portfolio. It is just about setting the price you bought a coin and also the amount you bought so the site can help you with the value of the coin and updating the price.

Although, be it any way, I do not go for it because all the sites that I have wanted to try it before are requesting for email. And it does not worth it in my own opinion.

[Mia Chloe]

~snip

The reason emails can easily sell you out is because of phishing attempts and most times they are so properly created that you'll barely be able to tell the difference from an authentic email it's even worse when the scammer is aware of the sites you registered with using that email.

As for addresses dust attacks can happen like upgrade00 mentioned but it's not as bad as phishing. If you strongly feel your address is too public consolidate your inputs or run a sweep to a new seed.

[Cookdata]

The question in mind is if your address is know to hold $7000 worth of Bitcoin and alternative coins is there is possible dangers that I should be on the lookout for?

Does wallet addresses alone carries some risks when they aren't empty and exposed this way?

Now that I know Somegory has $7000 investment, maybe if I track his signature wallet address, I may be able to track his investment wallet address

I think you need to work on your privacy, you don't need to mention $7000 of your investment of Bitcoin and altcoins, same way you don't need a tracker with your address and email.

No harm will come to your wallet address but you might get phishing scams.

[PrivacyG]

The question in mind is if your address is know to hold $7000 worth of Bitcoin and alternative coins is there is possible dangers that I should be on the lookout for?

If you added multiple Addresses to a 'Portfolio Monitor' which makes me assume you also generally do not care about having these Addresses linked, you most probably do not have any thing to look out for.  This would be a thing to worry about if you do not want your Addresses to be linked to the same person or Portfolio.  If it does not matter to you, it is all right.

[Mpamaegbu]

OP, the only time you should get worried is when you start receiving OTP notifications to that email you signed up with. It means someone is attempting to hack your email and possibly see if you've your seedphrases saved there. Otherwise, ignore them. It's a phishing attempt.

I don't know the advantage of using this third party website to monitor your portfolio even though you set that up as watch only wallet.

It's advantageous for those who've their crypto investments scattered here and there. Sometimes we forget what we've and where we've them. Even when they pump we may not know. But having them on a watchlist helps track them when they pump or dump.

I feel it is even risky to expose your wallet that much becaise you may be opening yourself up as a target for phsishing and other forms of attacks.

Nah, there's no such risk. If there were, that means those of us in signature campaigns would be compromised. The only thing I would advise is for one to not use a single address everywhere. Wallet addresses are like bank account numbers. No one gets hacked that way until personal data are assessed.

[NeuroticFish]

I think you need to work on your privacy

Very good point! And I will plus a little on this. What if the leaked e-mail address is also a givenname.surname@emailprovider.com? Then the hacker also knows your name too.
Maybe for 7k he will not bother to look you up because there are almost surely bigger fish, still, as said, privacy matters.

Even more, from wallet address one may be able to track what services you use (exchanges, online wallets, crypto card, name it) and try to attack/access those given he already has a clue on the user name = e-mail. If the password is weak and 2FA is missing, there's a risk, else it means even more opportunities for phishing, yay!


And yeah, the usual suspects were already mentioned: personalized phishing, address poisoning, dust attacks...

[ColdLava40]

I don't know the advantage of using this third party website to monitor your portfolio even though you set that up as watch only wallet. I feel it is even risky to expose your wallet that much becaise you may be opening yourself up as a target for phsishing and other forms of attacks. As a matter of urgency, discontinue using that service and if possible, transfer your money out of that exposed wallet that have been tied to your email.

With the rate at which clients data and personal informations are being leaked today, it's already risky what more sharing the status of your holdings to third party site?

It's like giving the marker to the scammers to make work easier for them in spotting you.

You can manage all your portfolio manually without needed any app or site to he!p out.  I think everyone has a taste for different things though. Op will most likely be victim of phishing schemes soon enough.

[promise444c5]

Does wallet addresses alone carries some risks when they aren't empty and exposed this way?

Not really .. the attacker has your email  and can decide to do anything with it  including selling it if he’s only in for getting a particular information about a target. So basically what you may experienced has been mentioned.  You can easily change your address btw but that won’t really be necessary.

They didn’t access the main DB,  I would have probably mentioned that you should be worried if you have a weak password but still you can change your password if truly you have a weak/reused password.

The question in mind is if your address is know to hold $7000 worth of Bitcoin and alternative coins is there is possible dangers that I should be on the lookout for?

I agree with cookdata.. you really need to work on your privacy.
But you can easily just do some internal transfer to a new account   and move it to a self custody or just directly move it to a self custody wallet  but it all depends on how the exchange handles internal transfers. You may need to just swap for fiat and buy using P2P on the second account.

I’m sure one of these should work .

[Somegory]

The email address is the risk you're exposed to, you can receive personalized phishing links there. Scammers will try to get you to panic and make a mistake that can lead to you sending them actual sensitive personal information.

Your address being exposed doesn't pose a security risk. Many users here are on campaigns with their addresses in a public spreadsheet. A dust attack can be attempted, to try and get an idea of any other wallets you own but that also doesn't expose you to any further risk.

Don't worry about this because I know the original email address of cryptorank and even if scammers get access to the original email account I am not clicking on any links.

If they ask for any sensitive information I will know that their email.accounnt is compromised, the question that needs answer is what could happened to the exposed wallet address.

[promise444c5]

If they ask for any sensitive information I will know that their email.accounnt is compromised, the question that needs answer is what could happened to the exposed wallet address.

Nothing!

The address is own by the exchange. Unless they gain full control over your account they can’t do anything than tracking the funds but that depends on how the exchange handles their t transactions as I’ve mentioned earlier.

They don’t need to ask sensitive information actually, there are so much ways they can use since they have a valid email and they know something about you.

It may not even be all about your exchange account.

[boyptc]

I don't know the advantage of using this third party website to monitor your portfolio even though you set that up as watch only wallet. I feel it is even risky to expose your wallet that much becaise you may be opening yourself up as a target for phsishing and other forms of attacks. As a matter of urgency, discontinue using that service and if possible, transfer your money out of that exposed wallet that have been tied to your email.

That's only a tracker but if it requires to register/signing up and inclusion of your email address, once they are hacked then your email address and other information are exposed to the hackers.

While there are crypto trackers that don't require any information at all but only need to download, everyone is free to input data there of their portfolio whether it's correct or incorrect.

As said for address poisoningdust attacks, you'll only fall for it if you copy your address upon sending through your latest transactions.

[salad daging]

Also be careful of dusk attack and address poisoning. You should read about the two. Check and recheck the addresses that you are sending coins to before sending the coins.

Has there ever been a dust attack on bitcoin addresses? Because what I know is that dust attacks often target EVM addresses with already many victims, up to tens of millions of dollars just floating around due to address poisoning initiated by dust attacks.

Although, be it any way, I do not go for it because all the sites that I have wanted to try it before are requesting for email. And it does not worth it in my own opinion.

Coinmarketcap, Coingecko, Cryptorank platforms ask for an email because they need to log in first to create a portfolio, until now they have not found a decentralized one, they have found someone in X to create a portfolio in a spreadsheet but for me they still do not understand about coding prices in those tools.

[Stalker22]

~
As said for dust attacks, you'll only fall for it if you copy your address upon sending through your latest transactions.

Thats not the real goal of the dust attack.  You are confusing a classic dust attack with an address poisoning scam.

Actual dust attacks send tiny amounts of crypto to your wallet to trace your UTXOs, link your public addresses together, and deanonymize your identity.  You dont fall for it by copying an address, you fall for it by spending that dust in a future transaction and combining your inputs.

[Charles-Tim]

Has there ever been a dust attack on bitcoin addresses? Because what I know is that dust attacks often target EVM addresses with already many victims, up to tens of millions of dollars just floating around due to address poisoning initiated by dust attacks.

You are referring to address poisoning, not dust attack.

The one for bitcoin, but which will be from the address that is not likely similar to your address is called dust attack.

You can rest more about the two.

Coinmarketcap, Coingecko, Cryptorank platforms ask for an email because they need to log in first to create a portfolio, until now they have not found a decentralized one, they have found someone in X to create a portfolio in a spreadsheet but for me they still do not understand about coding prices in those tools.

That is what they want you to believe. There are many ways people can login without email. Codes can be generated for individuals.

[Mr Reporter]

Advice:
Do not use emails on these sites. I always avoid using email and I do not set up any portfolio. I am wondering how some people like portfolio of a thing. I can easily know the coins that I am having.

A little bit of breaking down from what I understand and why I feel your advice should work, is that most hacks don't start from blockchain, they started from exchange like ByBit ,Binance Security Alerts on emails with fake link which drain your wallet…from what it looks like there is never a leaked email link to it, no pushing e-mail, no data leak if the site gets breached.

And I feel what should be taken note of is you don't rely on the site to tell you what to do…from my understanding that not the phrase “ not your keys, not your coins” mindset….