This week we discuss an how Coinnest accidentally airdropped millions in Bitcoin to traders on their exchange. Also, is hacked know-your-customer data being sold on the Darkweb? Fake IOTA seed generators led to millions of dollars being stolen. A new ransomware is infecting Bitcoin mining rigs. We also talk about McAfee's exile on a boat, and C ...…

We discuss Grin, a new MimbleWimble-based cryptocurrency. Also, Cryptopia was hacked, a critical vulnerability was found in the Beam wallet, and we discuss a nifty trick that attackers are using to trick torrenters into installing malware. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at ht ...…

This episode is our 1-year anniversary episode. We talked about what happened in 2018 and some predictions for 2019. We also chatted about the Ethereum Classic 51% attack, FPGA's, and some new coins to mine. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at https://taseh.bandcamp.com/ Busine ...…

Bitcoin Cash split into Bitcoin Cash ABC and Bitcoin Cash SV. We talk about the potential attacks that might take place from either side. Additionally, we discuss various mining attacks as well as a some new ransomware. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at https://taseh.bandcamp ...…

This week we discuss the impending Bitcoin Cash fork. Also, we take a look at Grid+ products. Binance froze funds for WEX accounts. We chat about Ravencoin Asset class activation. There were some exit scams, hacks and more. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at https://taseh.band ...…

IBM won a patent for a blockchain-based security system. Studies show that %54 of crypto exchanges have vulnerabilities. Monero fixed the "burning bug". Super Micro boards potentially have a tiny hardware backdoor. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at https://taseh.bandcamp.com/ ...…

Japanese exchange Zaif was hacked for $60 million. Two SIM swappers in Oklahoma were arrested. The port of San Diego was hit by a ransomware attack. Monero started an initiative against mining malware. We also discussed Ripple briefly overtaking Ethereum in overall market cap. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-Sha ...…

On this week's episode the crypto market looked as if it was making a comeback but in just the past 24 hours billions of dollars have left the market. This caused pretty much every coin and token to drop in price. We talked about a few new Cryptojacking attacks and a new cryptocurrency-related puzzle. All that and more on episode #30 of the Coi ...…

On this week’s episode Steve gives a great introduction to QT wallets and how to safely backup and store your wallet files. Also, China appears to be cracking down on cryptocurrency exchanges once again. All that and more on Episode #29 of the CoinSec podcast. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. ...…

On this week's episode Mike and Steve are back from Black Hat and DEF CON. We talk about Microsoft's new blockchain as a service tool. A new Blockchain red team tool was dropped at DEF CON called Tineola. A Hacker's bail was set to be paid in cryptocurrency. And AT&T was sued for not protecting someone from a SIM swapping attack. All that and m ...…

This week we discussed SIM swapping attacks. Spammers resorting to hijacking verified Twitter accounts, phishing for two-factor tokens, and a massive new CoinHive campaign. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at https://taseh.bandcamp.com/ Business Box by Audeka is licensed under ...…

Cryptojacking appears to be fading at the moment but at the same time more advanced malware is being discovered daily. We talk about how to spot a "bad coin" in terms of mining, security, etc. Lastly, Steve gives us a Digibyte primer. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at https:/ ...…

Should you disable your anti-virus just to run your mining software? We talk about that as well as other security issues that come up for cryptocurrency miners. Also, the exchange Bancor was hacked for $23.5 million. The Opera mobile browser is adding a cryptocurrency wallet and a new vulnerability was discovered in Ethereum. Honk Kong by Taseh ...…

On this week's episode Mike built a mining rig so we chatted quite a bit about GPU's and the market. Syscoin had an issue that caused Binance to reset API keys for its users. HOYOS has offered a $100 million dollar bug bounty for anyone that can hack it's custom wallet. Electroneum is forking to allow ASICs to mine again. Honk Kong by Taseh is ...…

We chat about Ross Ulbricht getting denied a petition of his life sentence. Mastercard wins patent for anonymous blockchain transactions. The allegedly "unhackable" Bitfi wallet. FPGA's are making a comeback and more! Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a work at https://taseh.bandcamp.c ...…

On this episode the hosts discuss cracking passphrases with hashcat. Also, Zcash is battling ASICs. A proof of concept for a command and control channel over Ethereum is discussed. BitThumb got hacked. Lastly we discuss some recent arrests that were made in the cryptocurrency world. http://coinsecpodcast.com/episode-22-show-notes/ Honk Kong by ...…

West Virginia becomes the first U.S. state to allow internet voting by blockchain in primary elections. Does security matter now??? An EOS Bug Bounty paid out $90k to one researcher. YiiMP pools being jacked of Raven coins, and more! Show notes: http://coinsecpodcast.com/episode-21-show-notes/ Honk Kong by Taseh is licensed under a Attribution- ...…

In episode 20 of the CoinSec podcast we discuss the epic remote code execution vulnerability found in EOS. How much would it cost to perform a 51% attack against a given cryptocurrency? Two banks were blackmailed for XRP. Electroneum is having block issues. Show Notes: http://coinsecpodcast.com/episode-20-show-notes/ Honk Kong by Taseh is licen ...…

On this week's episode we discuss the Bitcoin Gold double spend attack. Verge, Taylor, and Cypherium Chain all got hacked. Coincheck is removing privacy coins, and we have interviews from Hack Miami. Also, we talked about the Sentinel Protocol ICO. Show Notes: http://coinsecpodcast.com/episode-19-show-notes/ Honk Kong by Taseh is licensed under ...…

This week we didn't have much of an agenda but we chatted a lot about some of the potential innovations attackers could make in terms of malware and had some other really really bad ideas. Show notes: https://coinsecpodcast.com/episode-18-show-notes Honk Kong by Taseh is licensed under a Attribution-NonCommercial-ShareAlike License. Based on a ...…

In this episode the hosts of the show talk about what it takes to build a cryptocurrency mining rig. We fill a cart and purchase all the pieces necessary by the end of the episode. To see the details of the rig we built be sure to check out the show notes here: https://coinsecpodcast.com/episode-17-show-notes Honk Kong by Taseh is licensed unde ...…

We welcome the creators of the cryptocurrency CTF held at BSides NoVA John and Will (bspar_) to the show. Capture the Flag contests are a huge part of the InfoSec ecosystem. We discuss their CTF along with how they can create more interest in a specific topic like cryptocurrency. The hosts also discuss their experience with the cryptocurrency c ...…

Special guest Troy Mursch AKA "@bad_packets" is a researcher who specializes in cryptojacking, botnets, and more. We discuss his experience with the latest trends in cryptojacking. Also, a new vulnerability was discovered in some Equihash mining pools. A new smart contract vulnerability called BatchOverflow was discovered. We also discuss the R ...…

In episode 14 we are joined by Maurelian and Bernhard from ConsenSys. They brought their knowledge around smart contract security to the show. Bernhard recently published a paper titled "Smashing Ethereum Smart Contracts for Fun and Real Profit" that introduces a security analysis tool for Ethereum smart contracts called "Mythril". Discussion a ...…

A cryptographic flaw was found in Zerocoin. Hosts discuss the top 10 smart contract vulnerabilities as detailed in the Decentralized Application Security Project (DASP). ACINQ lost their code signing key forcing them to push a new Android app. $3.3 million worth of Bitcoin was allegedly stolen from the CoinSecure exchange. Honk Kong by Taseh is ...…

In episode #12 we welcome special guest Sneakerhax to the CoinSec Podcast! We discuss some of the security issues around cryptocurrency wallet software. Malicious coin-miners have been found embedded into semi-legitimate Android applications. Lastly, we discuss Verge cryptocurrency being hacked. Honk Kong by Taseh is licensed under a Attributio ...…

This week on the CoinSec Podcast Brian Krebs investigates who and what Coinhive is. The city of Atlanta is fighting a ransomware attack. Drupalgeddon 2.0 is happening as a new RCE has surfaced. Fileless crypto-mining malware has surfaced. All that and more on CoinSec Ep. 11. Honk Kong by Taseh is licensed under a Attribution-NonCommercial-Share ...…

A fifteen-year-old found some pretty epic vulnerabilities in both of the leading hardware wallets Ledger Nano S and Trezor One. Research was released detailing how there is potentially illegal content being posted on the Bitcoin blockchain. A $10,000 bug bounty was payed out by Coinbase to a researcher who found a vulnerability that would have ...…

This week Beau and Ralph discuss a new vulnerability patched in IOTA related to signature issues. Monero is forking due to ASIC mining systems hitting the market for the CryptoNight algorithm. Trail of Bits released a new smart contract fuzzer called Echidna. A Kickstarter for a steel rod called CryptoHex to store BIP39 seeds is running. Additi ...…

Bitcoin Private is a fork of a fork of a fork that merges the ZClassic and Bitcoin blockchains. The Binance exchange protected its' users against a major hack this week. Researchers found that the Ethereum network was vulnerable to 'Eclipse' attacks. Electroneum re-implemented a bug where a hardcoded hash was copied over from Monero. Lastly, $2 ...…

How to crack Bitcoin wallets with BTCRecover was discussed by the hosts on this week's episode of the CoinSec Podcast. Hackers hacking hackers with Ethereum honeypots was talked about. Discussion around the potential of generating keys that match wallet addresses was had. Lastly, don't store your mnemonic recovery keys on your disk or your goin ...…

Sidechains in cryptocurrency have been a relatively hot topic recently with currencies like Cardano and Lisk building functionality around them. Security concerns around sidechains were discussed in this episode. The crew talked about the Bitgrail hack, a 0-day vulnerability in Bitmessage, and the next dark web currency. Also discussed was how ...…

The CoinSec Podcast welcomes Travis Lelle (host of The Bitbull Podcast) to the show for an interview. Steve gave a rundown of the Verge cryptocurrency Wraith Protocol. A Russian engineer tried to use a supercomputer to mine Bitcoin. More mining malware, a Ledger hardware wallet vulnerability, predicting PRNG's in Ethereum Smart Contracts, and m ...…

On this episode Mike Felch (@ustayready) details some of the critical vulnerabilities that can be introduced into Ethereum smart contracts. The largest cryptocurrency hack ever happened to Coincheck. Coinhive made it's way into Google ads, and a new malware called WannaMine is using the NSA Eternal Blue exploit to compromise more hosts to mine ...…

Steve Borosh (@424f424f) gives an introduction to mining cryptocurrencies. The hosts chat about the idea of splitting up private keys in different physical locations. News items for the week included VeChain's first ever cryptocurrency disaster recovery plan, reports of North Korea hacking South Korean exchanges, Sia ASIC miner drama, and discu ...…

This episode welcomes Chris Gates (AKA carnal0wnage) to the show to discuss how he got into cryptocurrency, and his new cryptocurrency project "The Great Altcoin Chase" (www.thegreataltcoinchase.com). Oracle WebLogic servers were being exploited to mine Monero, and Checkpoint states that Coinhive was the most prevalent malware of December, 2017 ...…

In this inaugural episode of the CoinSec Podcast each host provided a brief history of their involvement in the InfoSec industry, and how they each got into cryptocurrency. Discussions were had around the latest vulnerabilities in the crypto space. Critical Electrum & Parity wallet vulns were discovered. Overstock.com had a critical vulnerabili ...…