Security Alert – Smart Contract Wallets created in frontier are vulnerable to phishing attacks

Affected configurations: All sensible contract wallets created utilizing Ethereum Pockets  Frontier, model 0.4.0 (Beta 7) or earlier. Wallets created with Ethereum Pockets 0.5.0 and all later variations launched after March 3, 2016, are not affected.

Probability: Low

Severity: Excessive


Don’t use pockets contracts or proprietor accounts of these wallets that have been created by the Ethereum Pockets 0.4.0 or earlier. For those who ship to (or work together with) a malicious contract it might take possession of your pockets contract. Create a brand new pockets and transfer your funds.

How to be tremendous secure??

Do not use the vulnerable pockets contracts, AND the proprietor accounts of those wallets to ship ether and work together with contracts you do not know!
For those who do not use these accounts and wallets, and improve your pockets as 
described here, you are secure!


An assault vector was found that impacts the sensible contract wallets created earlier than the Homestead launch (Frontier section). The assault can occur if an affected pockets interacts with a malicious contract OR if the proprietor account of an affected pockets interacts with a malicious contract that is aware of the tackle of his pockets. An attacker can then impersonate the proprietor and thus can steal funds or tokens and alter the proprietor of the pockets.

If you don’t use your pockets and proprietor accounts with contracts you do not know, you are secure!

Receiving Ether and sending Ether to non-contract accounts is okay.

Additionally for those who configured your pockets with multisig, you are safer, because the attacker would wish to make you ship with all homeowners to malicious contract(s).


Proposed answer:

We advocate that for those who created a pockets utilizing the affected variations, you are taking certainly one of these steps:

  • Create a brand new pockets with the newest model of Ethereum Pockets (any model from 0.5.0 or newer) and transfer your funds there. You can follow these steps.
  • Till you do the above, don’t use any account which is an proprietor of an affected pockets, or the affected pockets itself to work together with closed supply or in any other case unknown contracts which may set off arbitrary actions (together with forwarding Ether). Ship/work together solely to addresses you personal, or know!
  • Create a secondary account in your every single day utilization. This one shouldn’t be related to your contract wallets


We created a brand new Ethereum Pockets launch 0.7.6, which can detect your vulnerable wallets.

Download the latest release and follow the steps described in the release notes to update your vulnerable wallets!

DailyBlockchain.News Admin

Our Mission is to bridge the knowledge gap and foster an informed blockchain community by presenting clear, concise, and reliable information every single day. Join us on this exciting journey into the future of finance, technology, and beyond. Whether you’re a blockchain novice or an enthusiast, is here for you.
Back to top button