WhisperX tag archive

#wallet-security

This page collects WhisperX intelligence signals tagged #wallet-security. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Vault · 2026-04-26 15:54:08 · GitHub Issues

1. Nuup Custodial Wallet Vulnerability: Stellar Private Keys Stored Unencrypted in Database Despite Encryption Field

A critical security gap has been identified in Nuup's custodial wallet infrastructure. The platform's `Wallet` model includes an `encrypted_secret` field intended to store AES-256-CBC encrypted Stellar private keys, but the actual implementation in `authController.js` stores raw secret keys in plaintext. This means any...

#cryptocurrency#wallet-security#stellar#aes-256-cbc#private-key-protection