Beam Announces 'Critical' Vulnerability in Mimblewimble Crypto's Wallet

The Beam privacy coin's development team announced a "critical" vulnerability discovered in its wallet software Wednesday, telling users to remove old versions immediately.

AccessTimeIconJan 9, 2019 at 9:52 p.m. UTC
Updated Sep 13, 2021 at 8:47 a.m. UTC

The team behind Beam, a newly released privacy-oriented cryptocurrency, announced Wednesday that a “critical vulnerability” has been discovered in its wallet software.

Disseminating the information from their official Twitter account, Beam urged users to uninstall the Beam Wallet application immediately and redownload a patched version of the application again from their website. The project’s GitHub page – which echoes the warning regarding the wallet software – states that “details for the vulnerability and the CVE will be published within a week to avoid exploits.”

The GitHub page further states:

"[The] Vulnerability affects all previously released Beam Wallets both Dekstop and CLI. DO NOT DELETE THE DATABASE or any other wallet data. The vulnerability DOES NOT affect wallet data, secret keys or passwords."

The announcement specifies that the vulnerability found in the wallet software was discovered solely by the Beam developer team "and not reported anywhere else." In a post on Discord, CTO Alex Romanov said that "the issue was already fixed" and that miners and nodes are unaffected.

The situation comes just days after Beam became the first cryptocurrency to go live utilizing the privacy tech known as Mimblewimble, which is touted as a means by which transactions can be made confidential and effectively untraceable. Beam launched ahead of Grin, another implementation of the technology that is expected to launch next Tuesday.

Beam of light image via Shutterstock

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Trending

1
CoinDesk - Unknown
Crypto Hedge Funds, Traders Short Tether After UST’s Implosion: Report

The positions are worth at least “hundreds of millions” of dollars in notional value, one trader said.

CoinDesk - Unknown
2
CoinDesk - Unknown
Morgan Stanley: GPU Demand Likely to Slow if Ethereum Moves to Proof-of-Stake

Moving to PoS will also not solve Ethereum’s scaling problems, the report said.

CoinDesk - Unknown
3
CoinDesk - Unknown
Ethereum Lending Protocol XCarnival Hit With $3.8M Exploit, Recovers 50%

The DeFi protocol persuaded a hacker to return $1.9 million from a smart contract exploit.

CoinDesk - Unknown
4
CoinDesk - Unknown
Australian Crypto Exchange Banxa Cuts 70 Staff

The crypto exchange said the "crypto winter" drove such a decision.

CoinDesk - Unknown