Pages:
Author

Topic: ATTENTION EVERYONE! MEW isn't safe to use right now. (Read 414 times)

newbie
Activity: 52
Merit: 0
myetherwallet.com isn't safe to use right now. It seems that the DNS of MEW was hijacked, which resulted in loss of all the funds from MEW accounts. Check subreddit for details. It is advised to use the offline version of MEW until official notification of MEW's safety.

Need help to use offline MEW? Check this out:
https://myetherwallet.github.io/knowledge-base/offline/running-myetherwallet-locally.html


Note: I'll update this thread once I found any official announcement.

Edit 1;
someone lost 85 ETH https://etherscan.io/tx/0x6b2d0464eef4c90677a555701b26820e606f5a52f3926725291bca6cc6936167

Here is the moved funds: https://etherscan.io/address/0xb3aaaae47070264f3595c5032ee94b620a583a39


Update 1:
MyEtherWallet says everything is normal now. [however, I'm advising to stop transaction for few more hours and learn from more users]
here is the official tweet https://twitter.com/myetherwallet/status/988836522974572544

Stay safe.


big thanks for the info dude, it really helps people not to lose their crypto. i idi lost anything but my friend was hacked for 5 eth recently
hero member
Activity: 966
Merit: 546
there is no news on the official site which indicates that company will try to recover the things as soon as possible and does n't create a situation of panic where everyone starts selling their funds, in way to save from stolen.
Does my ether wallet even make money from people using their service? I'm not aware of any fees they take or anything, so really it would be quite impossible for them to recover the money. To think an entire DNS like google could be spoofed or hacked and steal a bunch of people's money is just crazy. Wonder how that was even pulled off.
newbie
Activity: 25
Merit: 0
there is no news on the official site which indicates that company will try to recover the things as soon as possible and does n't create a situation of panic where everyone starts selling their funds, in way to save from stolen.
full member
Activity: 630
Merit: 103
The message recommends changing the DNS server:
https://www.reddit.com/r/MyEtherWallet/comments/8eloo9/official_statement_regarding_dns_spoofing_of/

Quote
A majority of the affected users were using Google DNS servers. We recommend all our users to switch to Cloudflare DNS servers in the meantime.

If in settings of network connection of your computer DNS servers Google are installed (for example: 8.8.8.8.), it is recommended to replace with the Cloudflare DNS servers: 1.1.1.1 or 1.0.0.1.
These servers are safer, faster also support the DNS new technologies
full member
Activity: 532
Merit: 107
This is really scary, and i think we should all be careful. I think in this forum 99% people use MEW wallet. It really sad to see its happening with MEW, i hope they fix the problem and tighten their security problem.
full member
Activity: 434
Merit: 100
Distributed Intelligent IoT Technology

Thank you for warning! I will not today to make transfers from the wallet.
Read, that have them hacked DNS server.It puts us in danger.
 
It is better to wait for official news from the developers before continuing to use MEW

This is the second such attack by a hacker. This is of course not very happy. And don't even know what to do with it. As far as I know, even a hardware wallet will not help in this case
member
Activity: 332
Merit: 10
I've always considered mew to be one of the safest online wallets. What a disappointment( Hope, they'll solve this problem and get back to normal work. All these online wallets are not 100% safe and can be hacked any time, unfortunately((
full member
Activity: 420
Merit: 107
Today I was able to go to MEW and even translated the broadcasts. So, you can breathe freely and continue to work. I hope that there will be no more such incidents)
member
Activity: 205
Merit: 10
Concerning with mew, they said hackers only stole some eths and not other coins, so for those with large amounts of eth better have a hardware wallet, better be safe. And I think mew is good now. I wonder if they really fixed it already
sr. member
Activity: 656
Merit: 261
Thankyou for information. Im using Imtoken for now. I think imtoken more safe right now. Just download on playstore.
CMIIW
full member
Activity: 954
Merit: 104
ludenaprotocol.io
Is there any official news about that? Hope my funds are safe.
hero member
Activity: 1456
Merit: 578
HODLing is an art, not just a word...
it is best not to use MEW at all, it is a web wallet and hacks like these will always happen or at least be a big risk. not to mention that when you are using these websites you are always online and being online means being at another risk of getting hacked and losing your money.

it is always best to use desktop wallets instead of web ones.
newbie
Activity: 295
Merit: 0
Wow, 85 ETH gone, really shocked me, If I have loosed such amount, next time I would be careful x10 times more. Thats sad to see such news, no one is in safe from being hijacked
newbie
Activity: 168
Merit: 0
I saw the news yesterday on the telegram ...Every day hackers become more and more sophisticated
member
Activity: 471
Merit: 10
QUUBE — First&Only Quantum Resistant Ecosystem
Wow I was so afraid when I heard this news and I rushed to check my wallet balance on etherscan and thank God everything was and is intact. I heard it was a dns hack. MEW website itself does not store our tokens but gives us access to the Ethereum network. I think it's safer to use metamask or the offline version of MEW as suggested by OP
jr. member
Activity: 227
Merit: 1
Honestly though, what is even the point of crypto if you have to resort to storing it on a hardware wallet just to avoid being robbed blind? That is the same level of security and convenience as paper money, except paper money doesn't come with transaction fees and isn't at risk of going kaput when it gets near a magnet.
member
Activity: 434
Merit: 25
Shameful. How this useful site can get hacked?

Google Public DNS (8.8.8.8/ 8.4.4.8 )  Servers are resolving the domain to a bad server that can steal your keys.
legendary
Activity: 1932
Merit: 1003
Hey, I heard about the myetherwallet issue today and looked into that ethereum address.  It looks like it's connected with the Symmetry fund scam.  https://bitcointalksearch.org/topic/m.29148148   Hopefully this information is useful to catch these bastards. 
BQ
member
Activity: 616
Merit: 53
CoinMetro - the future of exchanges
according to a post on Reddit, it does say that the HTTPS certificate is invalid.
listen to that warning from your browser!
legendary
Activity: 1302
Merit: 1027
This topic is very hot on reddit but I think this time myetherwallet is normal again but seriously this makes me paranoid to use mew website. For now i think the safest way today is using a wallet hardware like trezor, btw its metamask its still safe to use?

Exactly, as I also heard this topic on Reddit and really makes us wonder upon the current situation on MEW. Technology once again tend to be outdated and hackers attack for stole the funds. But there is no news on the official site which indicates that company will try to recover the things as soon as possible and does n't create a situation of panic where everyone starts selling their funds, in way to save from stolen.

But I thing that it is not good of not informing the users about the threat and they should have shutdown the server so hacker can not withdrew the coins
Pages:
Jump to: