Topic: Blender Wallet – non-custodial anonymous crypto wallet with built-in mixer - page 2. (Read 593 times)

We have started fund returning. If your funds were stolen from Blender Wallet, please contact support for compensation.
JABBER: [email protected]
E-mail: [email protected]

100 Btc in one person or accumulate?. I see you begin signature service today and your website can't use for the transaction also, just giving information about how to claim during the attack. I hope all fine and all balance users can be returned. Good to see you have responsibility.

100 BTC or currently over $3,3 million stolen, and this is what Blender team claims on their telegram channel:

https://t.me/BlenderWalletio_English/5

My question is how can passphrases be compromised if they are not stored in Blender's database?

I think that alleged hackers address should be posted in public with more explanation and clarification, but nobody should use Blender service and wallet for now.

Never expected for such a thing to happen, but I guess I was wrong ^{[I feel sorry for those that were affected by the incident in question]}... I'm not a coder/developer by any means but my gut tells me to lean more towards this hack being an inside job of some sort that intentionally left backdoors and just triggered it recently ^{[I hope I'm wrong]}.

---

I'm surprised that none of the affected users have posted anything so far ^[AFAICS].

Non-custodial and the hackers withdrawing 100 BTC of users in the same sentence?
How does this happen?  

If the wallet service doesn't store any user data on the servers, then how do you know which address was generated through blenderwallet and which address lost what?
How are you going to know who to compensate and who not to compensate.

You gesture to compensate the users is a good move, but I am more concerned about the root cause. Sorry for so may questions, I just need some education.

How was this possible if it's a "non-custodial wallet"? Please elaborate...
Requesting the seed phrases and passwords from your users to be sent without encryption to an email address that might be compromised sounds highly suspicious.

June 22, 2021 – Non-custodial crypto wallet Blender Wallet has been hacked. The hackers withdrew the amount of 100 BTC in total.

As a non-custodial service, Blender Wallet doesn’t store data about users on servers. The Blender Wallet team has immediately disabled registration and access to the wallets to  protect users’ funds and make sure that newly generated seed phases won’t get in hacker’s hands.The executives promise to cover the losses from Blender Mixer’s reserves. Every user who has lost the money due to the hack will get the exact amount of money on their balance. Further information on compensation will be available at https://blenderwallet.io and @BlenderWalletio_English Telegram channel.

“Over the course of investigation, we promise to figure out how hackers managed to hack a non-custodial solution, as we don’t store any data granting access to users’ balances on our servers. We initiated an internal investigation. The details of how hackers got access to users’ funds are still unclear,” commented the officials. "The whole crypto community, be it a regulated exchange or a mixer, should deploy all the forces against cybercrime, as it's users who get affected in the first place. And as a service we must do whatever we can to protect funds that we've been entrusted with."

There are lot of people who use our service and most of them use our telegram chats, you can check them:

https://t.me/BlenderWalletio_Russian
https://t.me/BlenderWalletio_English

Has anyone tried the service and can write a comment? How is it going? Can I trust my btc for this service?) I would appreciate your feedback.

1. I understand, but AFAIK using CloudFlare has major privacy implication. See Mixers using cloudflare's SSL certificates.
2. Ok, but that means more trust is required compared with similar service.

We've made small, but very important update. Exchanging crypto to fiat commission was decreased to 3%. Enjoy 

1.  This is our partner. Therefore he will not ask anything and exchange is made by API, so you are dealing only with our platform. If you have any issues with exchange (but that never happened before), you can write here our our support and we will solve it.

2. 

This is channel with the link to group  Here is direct link for your convenience – https://t.me/joinchat/VmC_FPy_Wtix61Qv

Yes, exactly, I meant that 

We're working right now on adding more payment providers, including PayPal. Stay tuned 

1. We use anti-DDOS protection powered by CloudFlare, therefore we need to use their TLS certificate.
2. No, we decided not to open our source code.

But what if someone else's deposited funds are flagged as part of someone else's exchange and they request some verifications and other stuff?
^{- I'm not sure about the exact method in regards to your mixing technique but is there a possibility for the above line to happen?}

Thank you for clarifying it

That's not a group but a channel where only admin can post. A group is where every one can make post and communicate to each others. :-D

Gosh! I had to check twice to ensure that I was not worng LOL

If you mean first unlucky person, than I hope not but I will hold you for your word.

Problem I noticed is limited support only for Advcash cards that are still not available in many countries around the world, so it would be a good idea to support other card providers.

We didn't face with such issues before. All our customers received their money in a few minutes. If you'll be the first luck person, who won't get paid, just send information to our group or directly to support and we will make a refund.

1. We are working with reliable third party partner, but anyway ALL exchanges are made using mixer, so they lose all connections.
2. RBF is working only with outgoing transactions, but you can use CPFP for both incoming and outgoing transactions.