{"id":7517,"date":"2018-09-08T11:38:11","date_gmt":"2018-09-08T18:38:11","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=7517"},"modified":"2019-04-20T16:24:09","modified_gmt":"2019-04-20T16:24:09","slug":"the-unhackable-bitfi-bounty","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=7517","title":{"rendered":"The unhackable Bitfi bounty"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[\n\n<p>Bitfi is a company which claimed to be the world&rsquo;s first unhackable crypto currency wallet.&nbsp; It offered $250k to those able to conduct a successful attack which the specific scenario of &ldquo;Somebody steals your device &ndash; Can they get your money or not?&rdquo;<\/p>\n\n\n\n\n<p>In a video, Saleem Rashid has shown how he sets a secret phrase and salt.&nbsp; Afterward, he ran an exploit showing he was able to extract the keys from the device.&nbsp; Andrew Tierney of Pen Test Partners, was able to verify the attack.&nbsp;&nbsp; At that point, Bifi closed the bounty program.<\/p>\n\n\n\n\n<p>Bill Powell, VP of Operations, then <a href=\"https:\/\/cryptovest.com\/news\/interview-bitfi-explains-drama-behind-allegedly-hacked-wallets\" target=\"_blank\" rel=\"noopener noreferrer\">clarified<\/a> that the wallet is only successfully attacked if the hacker gets the coins.<\/p>\n\n\n\n\n<p>Saleem &ldquo;Unhackable&rdquo; Rashid aka @spudowiar has recently <a href=\"http:\/\/twitter.com\/spudowiar\/status\/1035268163024420867\" target=\"_blank\" rel=\"noopener noreferrer\">stated<\/a> &ldquo;Bill Powell of <a data-mentioned-user-id=\"1016050036357107717\" href=\"https:\/\/twitter.com\/Bitfi6\">@Bitfi6<\/a> discussing the single assumption upon which the entirety of <a data-mentioned-user-id=\"1016050036357107717\" href=\"https:\/\/twitter.com\/Bitfi6\">@Bitfi6<\/a>&#39;s ridiculous UNHACKABLE claim lies could you even IMAGINE if this assumption was proved false?&rdquo;<\/p>\n\n\n]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[63,62],"tags":[],"class_list":["post-7517","post","type-post","status-publish","format-standard","hentry","category-education","category-research"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7517","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7517"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7517\/revisions"}],"predecessor-version":[{"id":7797,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7517\/revisions\/7797"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7517"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7517"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7517"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}