Topic: Blender Wallet – non-custodial anonymous crypto wallet with built-in mixer (Read 683 times)

It's down for me also, but can't you see their previous post (posted seven days ago) saying they will temporary shut down both of their websites for maintenance and for some technical work?
If you need to use bitcoin mixer you have other very good alternatives you can use meanwhile.

Your website sends Error 522. Something must have happened.

Services blender.io and blenderwallet.io are closed for maintenance. Completion dates for technical work will be announced later.
Your funds in Blender Wallet are safe. You can wait for the service to open or access them with a mnemonic and passphrase in the Electrum wallet or any other compatible wallet.
For those who have not received mixing results, they will be sent when the service starts.
We apologize for the inconvenience, please do not worry, the services will be resumed in the near future

Blender Wallet just added the exchange of BTC to the folowing currencies and payment systems:

RU:
- bank card
- QIWI

UAH:
- bank card
- AdvCash

USD:
- AdvCash

EUR:
- AdvCash
- Payeer

KZT:
- bank card

At first, this function will be available to a limited number of people. If you want to get access to the exchange, you need to follow the link published in the telegram chat of the service - @Blenderio_Russian, @Blenderio_English

You need to follow the link only once, after that the Exchange tab will become available.
Exchange function is available without KYC.

1. The client-side code of Blender Wallet is not obfuscated and can be reviewed by anyone with technical skills. You can check what happens on the client side and what is being sent on server. Speaking of offline generated passphrases, this feature is related to import and we are working on it.

2. Blender wallet uses AES-GCM algorythm for storage encryption with 256-bit AES key.

3. No. Right now we are not working on that task.

---

Defines a generation of recovery phrase and it's conversion into a binary master seed of an HD wallet.
https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki

Unless it's open source, it's not easy to verify it unless you pay experienced auditor (with JavaScript/cryptography expertise). Additionally, this wallet isn't compatible with BIP 39 (i tried it with result from https://iancoleman.io/bip39). So there's concern you can't restore access to your coin if the service is down/dead.

How can this claims be verified, and is there a way to generate mnemonic phrase offline that can later be used with Blender Wallet?

Can you tell us what type of encryption are you using exactly?
Bad encryption can sometimes be just as bad as having no encryption.

Are there any plans to release Blender wallet app that can be downloaded and run from computer instead of using web browser?

Non-custodial crypto wallet Blender Wallet released an updated version and resumed its work. The updated Blender Wallet comes with brand-new features and skyrocketed security.

What’s new?

All seed phrase-related operations are now happen on the client’s side
To ensure Blender Wallet’s higher security, a mnemonic phrase and a password (extension of the mnemonic phrase) will be stored on a user’s device (either in a local storage or as a file). The process of transaction signing will now take place on a client’s side too, while any type of sensitive data won’t be stored on the server. Security elevated!

Local storage encryption. To store securely all wallet-related information, local storage will be encrypted and protected with the help of a separate password. It allows getting access to the wallet without using a seed phrase. All you need is a storage and password.

Blender Wallet: it’s a non-custodial BTC wallet focused on user privacy. Blender Wallet has been launched in 2020 by the same team that had development blender.io –Bitcoin mixer existing on the market since 2017.

Key Blender Wallet’s features:
– Canceling unconfirmed transactions. A built-in RBF (Replace-by-fee) feature allows canceling unconfirmed transactions mistakenly sent to a wrong address or just transactions that stuck in the mempool awaiting confirmation.
– Speeding up the incoming and out coming transactions
– Built-in mixer – a solution developed by the blender.io team which allows sending mixed money right from Blender Wallet.
– Address control. Blender Wallet allows you to send BTC from manually picked addresses, add several senders’ addresses and freeze addresses (meaning you mark them as unused while sending the money).
The team will keep informing you about the upcoming updates. Stay tuned for new updates!

On June 19-22, an attack was made on our blenderwallet.io service, as a result of which an amount of about 100 btc was withdrawn from users' wallets. Here are transactions of thefts:

    6fb4f29727462b0968e406033a22055ccd19957d693e060517984718df801c52
    2c0dc84c4fcb631789e3643fa1c188d00a0f082ae680f2dabef73b96175d929a
    38bbab7b5754023b0644ffa67aa65877ab703fa797058ca4b6d61fc3915c22ba
    3c81dcca1573cd5b2ab183ac83f92f8bc840d5375008c9c79f18d3332dcc81c4
    6ec1a02c3e3d2aae0f27783c572022b3c22c67592effba3560bad86f4892186a
    6fb4f29727462b0968e406033a22055ccd19957d693e060517984718df801c52
    ae347ed9479f952970180a36810f71388b81cfab6a0466221890d4578bb5e179
    b00cc79594fdcff65ad06123b348d178a65f67091d3a9deabb42e52e9b461484
    cde86222c6ec7f177a1f97e953f20561703f66a1021e204d72e0674f525ee989
    dca5f645bf6136891ffa1a817fb623e460a8fafa8c873180a59fc3f5bf776cff
    e07e83f1968a36277a80b093d05cfc1239f86e9de04754d38017fd1afd36ff2d
    fda9739ec2c5d6b39242a7a982c68b756e3c0fafcbb7c43a21cdb56fd280f904
    46e4b62e354ab7b0b7d0847e670b4107c847f1b14d33815e9ce70e240ee339b2
    35d8c7e390626299db91bc7dd70cca7b84207b020836493692bb8e3ee137df43
    726edf2a9eecaaade9226a75ddd2215d6aaf60a12e504822f6aecdd5eef90de7
    671760b9d8aa9354840c1d45e18bfd13dec56eca3914885efa43ae9ab94d0c90
    34f5274fab7e7d1f87e99a3f8e53fba74507e52f5807083d513a7956d494e29c
    27854ebe3a88ec182fe36c2e9f72dd234b235e8b779a3447c0cf4956b184c6e8
    f56f57883c84d7161b9fa70829aa125d972573c52954661a7d3d1611566adbd2
    f76c6e22c3de32089afa6c12315be3582aab7419279a0028f2085e4251881173


After the incident, we conducted an internal investigation, which resulted in the conclusion that such an attack could only be carried out by having access to the servers and the hosting account where the Blender Wallet servers were located. We have passed the information to the hosting and expect cooperation from them.

At the moment, we are working on improving the architecture of the Blender Wallet. The estimated launch date is October 2021.

No, I'd say it proves nothing. I can't know if a screenshot is real of fake, so it has no value.
If you want to prove anything Bitcoin-related, sign a message.

Lol yes... i just registered to write that post. Before i had no need to write on this forum. If i show You secreenshot that they refunded me, You will still say that its fake.
I am happy they refunded me... they could just disapear like bictoinblender. For me service is legit and it was real hack. But let's wait for the development of events.

The "vouches" from newbies are a big red flag too.

Everything is ok. First i thought too that it may be phishing (or someone kidnaped owner, and told him to do so...hahaha ), but today they refunded me. I hope blender walltet will be back online and fix security issues, because for me it was best darknet wallet + mixer.

WARNING
I've just created BlenderWallet phishing attempt?:
At least verify if your funds are actually gone before sending your seed phrase!

Both of my guys have/are being taken care of. I would not hesitate to continue directing people to their service. They're a stand up operation!

Hope you guys get everyone taken care of and the wallet back open. As far as online wallets goes, yours is probably one of if not the best on the market!

Investigation process is still taking place. After all researches, we will come back and write in details how that happened. Please, be patient.

We are continuing compensation process, please check your accounts. We will really appreciate, if you write in this topic, when you receive your bitcoins back.

Of course, Blender Wallet will come back after fixing security leaks. Please, stay tuned.

Hi, im very sorry to hear my favourite service got hacked This is second time i lost my money on mixers. Before i lost big money on bitcoin blender. Will it be back online after some security maintenance?
I also lost about 5k$ ... can You refund me please?
Yesterday i wrote to email and jabber but no reply yet.

Today i used mixer and it still worked ok for me.

Looking forward to my guys hearing some good news tomorrow!

We have started fund returning. If your funds were stolen from Blender Wallet, please contact support for compensation.
JABBER: [email protected]
E-mail: [email protected]

100 Btc in one person or accumulate?. I see you begin signature service today and your website can't use for the transaction also, just giving information about how to claim during the attack. I hope all fine and all balance users can be returned. Good to see you have responsibility.

100 BTC or currently over $3,3 million stolen, and this is what Blender team claims on their telegram channel:

https://t.me/BlenderWalletio_English/5

My question is how can passphrases be compromised if they are not stored in Blender's database?

I think that alleged hackers address should be posted in public with more explanation and clarification, but nobody should use Blender service and wallet for now.

Never expected for such a thing to happen, but I guess I was wrong ^{[I feel sorry for those that were affected by the incident in question]}... I'm not a coder/developer by any means but my gut tells me to lean more towards this hack being an inside job of some sort that intentionally left backdoors and just triggered it recently ^{[I hope I'm wrong]}.

---

I'm surprised that none of the affected users have posted anything so far ^[AFAICS].

Non-custodial and the hackers withdrawing 100 BTC of users in the same sentence?
How does this happen?  

If the wallet service doesn't store any user data on the servers, then how do you know which address was generated through blenderwallet and which address lost what?
How are you going to know who to compensate and who not to compensate.

You gesture to compensate the users is a good move, but I am more concerned about the root cause. Sorry for so may questions, I just need some education.

How was this possible if it's a "non-custodial wallet"? Please elaborate...
Requesting the seed phrases and passwords from your users to be sent without encryption to an email address that might be compromised sounds highly suspicious.

June 22, 2021 – Non-custodial crypto wallet Blender Wallet has been hacked. The hackers withdrew the amount of 100 BTC in total.

As a non-custodial service, Blender Wallet doesn’t store data about users on servers. The Blender Wallet team has immediately disabled registration and access to the wallets to  protect users’ funds and make sure that newly generated seed phases won’t get in hacker’s hands.The executives promise to cover the losses from Blender Mixer’s reserves. Every user who has lost the money due to the hack will get the exact amount of money on their balance. Further information on compensation will be available at https://blenderwallet.io and @BlenderWalletio_English Telegram channel.

“Over the course of investigation, we promise to figure out how hackers managed to hack a non-custodial solution, as we don’t store any data granting access to users’ balances on our servers. We initiated an internal investigation. The details of how hackers got access to users’ funds are still unclear,” commented the officials. "The whole crypto community, be it a regulated exchange or a mixer, should deploy all the forces against cybercrime, as it's users who get affected in the first place. And as a service we must do whatever we can to protect funds that we've been entrusted with."

There are lot of people who use our service and most of them use our telegram chats, you can check them:

https://t.me/BlenderWalletio_Russian
https://t.me/BlenderWalletio_English

Has anyone tried the service and can write a comment? How is it going? Can I trust my btc for this service?) I would appreciate your feedback.

1. I understand, but AFAIK using CloudFlare has major privacy implication. See Mixers using cloudflare's SSL certificates.
2. Ok, but that means more trust is required compared with similar service.

We've made small, but very important update. Exchanging crypto to fiat commission was decreased to 3%. Enjoy 

1.  This is our partner. Therefore he will not ask anything and exchange is made by API, so you are dealing only with our platform. If you have any issues with exchange (but that never happened before), you can write here our our support and we will solve it.

2. 

This is channel with the link to group  Here is direct link for your convenience – https://t.me/joinchat/VmC_FPy_Wtix61Qv

Yes, exactly, I meant that 

We're working right now on adding more payment providers, including PayPal. Stay tuned 

1. We use anti-DDOS protection powered by CloudFlare, therefore we need to use their TLS certificate.
2. No, we decided not to open our source code.

But what if someone else's deposited funds are flagged as part of someone else's exchange and they request some verifications and other stuff?
^{- I'm not sure about the exact method in regards to your mixing technique but is there a possibility for the above line to happen?}

Thank you for clarifying it

That's not a group but a channel where only admin can post. A group is where every one can make post and communicate to each others. :-D

Gosh! I had to check twice to ensure that I was not worng LOL

If you mean first unlucky person, than I hope not but I will hold you for your word.

Problem I noticed is limited support only for Advcash cards that are still not available in many countries around the world, so it would be a good idea to support other card providers.

We didn't face with such issues before. All our customers received their money in a few minutes. If you'll be the first luck person, who won't get paid, just send information to our group or directly to support and we will make a refund.

1. We are working with reliable third party partner, but anyway ALL exchanges are made using mixer, so they lose all connections.
2. RBF is working only with outgoing transactions, but you can use CPFP for both incoming and outgoing transactions.

This is exactly link to this group 

Some question,
1. Why do you use CloudFlare TLS certificate?
2. Since it's wallet with mixer function, is it open source?

I think it depends on your location and currency you are using, so for example when using EURO you have AdvCash and Payeer option, for USD there is only AdvCash and for RUB you can use credit cards, YooMoney and Qiwi.
AdvCash has it's own debit cards but I am not sure if all countries are supported for their cards, and also keep in mind that service fee for selling Bitcoin directly from Blender is 5%, for example current rate is 1 BTC ≈ 56 434 USD but you would get around 53 612 USD.

My question for OP is what happens if you sell Bitcoin, transaction gets confirmed but you never receive any money? Do we get any guarantees or refunds and how?

Are those exchanges being made with the help of a third party?

Am I missing something in regards to parts I've highlighted in yellow?

---

It'd be great if you could also add a sign/verify message feature to it.

Maybe you can have a group with the channel so that potential clients can ask service related questions very easily and your mod or anyone from the core team can response to the group quickly.

Blender Wallet is a non-custodial anonymous wallet built on three main principles: speed, anonymity, and ease of use.

1. No KYC or AML. We don't care who you are or what you use your wallet for. Registration is free, as well as sending, receiving, and storing funds.
2. A built-in mixer available at any time. We call it a "blender" because it turns your crypto into dust.
3. Exchanging crypto to fiat with minimum fees and no questions asked.
4. Reliability. Security is just as important in the crypto industry as anonymity. When registering, you must save a mnemonic phrase that cannot be hacked.
5. Support service that will quickly and professionally resolve any issues.

Web: https://blenderwallet.io/en/
Onion: http://blenderwal4qsydi.onion
E-mail: [email protected]  
Jabber: [email protected]
Telegram: https://t.me/BlenderWalletio_English

Here are some of the Blender Wallet advantages:

1. A built-in mixer that "grinds" crypto into dust. There would be no way of tracing the origin of funds. All you need to enable this feature is to click "Use Mixer" on your wallet page.

2. Fee bumping. You can quickly speed up incoming and outgoing transactions with RBF and CPFP mechanisms. You can also regulate the network fees yourself when sending funds.

3. Transaction discarding. That's right. You can cancel transactions that are still in the mempool - click on the corresponding button in the transaction details.

4. Exchanging crypto to fiat in a few clicks without any hidden fees.

5. Sending to multiple recipients. This feature allows you to pay all your employees at once, for example.

Of course, our team is constantly improving the functionality of Blender Wallet. Android app and Telegram Bot are about to be released. You can always leave your feedback on our website - let us know what is currently lacking in the Blender Wallet. We will do our best to take everything into account and inform you about the upcoming improvements.

You can find Blender Wallet here:

Web: https://blenderwallet.io/en/
Onion: http://blenderwal4qsydi.onion
E-mail: [email protected]  
Jabber: [email protected]
Telegram: https://t.me/BlenderWalletio_English

Please, describe your experience with Blender Wallet in this thread. Your opinion is critical to us