Leak -- Compromised OWNER key successfully protected [ $ 232 ]

❗❗❗ 💀 ⚠️ 💀 ⚠️ ❗❗❗
It's a new day and another user leaked one of their private keys into the Hive Blockchain.

They COMPROMISED their:

private OWNER key

HOW: in a transfer operation

The compromised account owner has now been notified in multiple ways. The identity of the user will be disclosed only in the monthly report in order to give them time to address the issue.

Compromised account stats:

Reputation: 55
Followers: 409
Account creation: 9/2016
Last social action on chain: 2022/4/5
Estimated account value: $ 232.74

Top 5 private ACTIVE keys protected:

_{1. @nextgen622:}~$ 28,000 _{2. @cryptoandcoffee:}~$ 8,400 _{3. @runridefly:}~$ 3,300 _{4. @globalmerchantio: ~$ 250}
_{5. @j3dy: ~$ 120 (500 HIVE automatically protected for 9 days)}

_{My security disclosures for Hive:}
_{- _{XSS vulnerabilities in #########.com}}
_{- _{XSS vulnerabilities in hive-db.com}

- _{XSS vulnerabilities in scribe.hivekings.com}

- _{XSS vulnerabilities in hiveblockexplorer.com}

- _{Malicious ads redirecting all Steemit iOS users to a phishing site}

- _{Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page}}

_{Other contributions:}
_{- _{Universal script to prevent phishing in all Hive frontends}}
_{- _{Commands for community reports and ban/mute lists}}
_{Future development: _plan}
_{Last (bi)monthly report: _{https://peakd.com/@keys-defender/monthly-report-june-july-august-2021-hive-13323}}

Keys-Defender features:

- _{Keys protection_{[live scan of transfers/posts/comments/other_ops.
Warnings (reply and memo), auto-transfers to savings until fully restored, auto-reset of keys, ..] {see automatic posts on leak and monthly reports}}}
- _{Phishing protection
_{[live scan of comments and posts to warn users against known phishing campaigns and compromised domains or accounts, scan of memos and auto-replies, anti phishing countermeasures - eg. fake credentials]}}
- _{Re-posting detection
_{[mitigates the issue of re-posters]}}
- _{Code injection detection
_{[live scan of blocks for malicious code targeting dapps of the Hive ecosystem]}}
- _{Anti abuse efforts
_{[counteracts spam from hive haters and milking campaigns]}}

_{_{Discord chat}}

To support this project..

- _Delegations:
_{10, 50, 100
500 HP, 1000 HP}

- _{Curation trail:} _{_{Follow my curation trail on hive.vote to upvote all my posts with a fixed weight.}}

_{This project is sponsored by} @cryptoshots.nft
_{First-Person-Shooter, play-to-earn,} 3D game_{, for browsers.} Powered by Wax and Hive.
_{https://crypto-shots.com/discord}
_{https://twitter.com/cryptoshots_nft}

Sort:

Trending

[-]

vimukthi (74) 2 years ago

This is a great service. I have seen some of your comments over my time on HIVE. This is the first time I'm reading one of your reports.
!PIZZA

Posted Using LeoFinance ^Beta

$0.09

2 votes

keys-defender (69) 2 years ago

Thanks for passing by 😎

$0.04

nkechi (59) 2 years ago

Its a good thing, the account was recovered. I would like to hear the rest of the story so we can all learn not to make similar Mistake in the future.

$0.08

1 vote

Don't copy and paste your private keys, ever.

You never need you owner key except for changing all your keys, so it should not be stored in the same place as your posting and active key if you really want to keep copying them.

I suggest the keychain extension, no more copy & pasta.

Okay.. Thank you!

How do I use the keychain extension please?

$0.00

Here you go:

Thank you!

pizzabot (58) 2 years ago

PIZZA!

PIZZA Holders sent $PIZZA tips in this post's comments:
@vimukthi_(2/5) tipped @keys-defender (x1)

_{Join us in Discord!}