IOTA account holders must change their passwords
After an update of their committed Trinity wallets, The platform has advised its users to change their passwords.
After an attack on his network, last week, the Iota Foundation stopped its network. Hackers stole tokens of at least 10 high-value accounts on the network.
The foundation traced the vulnerability of the network to the desktop version of Trinity.
The foundation wrote in a tweet Thursday:
«Trinity users: if they opened #Trinity between December 17, 2019 and February 18 from 01.30 CET 2020, they will need to use the seed migration tool to protect their tokens. More details about the tool and the migration period soon. »
It is expected that only those who used the desktop version have been affected by the hack. Those who opened the desktop version of Trinity during the date range are open to vulnerability.
The mobile version of the wallet has received a new update. As a precaution for its Ledger Nano users, the foundation has advised all account holders to change their passwords.
When solving the vulnerability issue, the password change is expected to be just a start. Token owners may need to acquire new seeds.
The network can restart. However, this will not be done until a tool for the seed migration process has been implemented.
The foundation has also promised that a full report on the hack will be made available. It is known that the attack could have been as a result of Moonpay's integration into the platform. The integration should allow Iota users to buy Iota directly from their wallets. In the patched version, the Moonpay function does not appear.
However, the attack occurred, hackers may have attacked and acquired a lot of seeds. It seems that users who have tokens and do not use the migration tool may still be vulnerable.
The foundation has promised a plan for those who were affected by the attack.