Malicious code injected into BitPay’s Copay wallet steals private keys

Copay, the multisignature wallet from BitPay, described itself as a “secure, shared Bitcoin wallet.” That, apparently, hasn’t been the case for the past several months.

On Monday, BitPay warned users that its open-source wallet has been compromised by a malware that “could be used to capture users’ private keys.” According to the blockchain payments company, users “should assume that private keys on affected wallets may have been compromised”—specifically versions 5.0.2 through 5.1.0 of the Copay and BitPay apps—and they should move their funds to the 5.2.0 version of the app immediately.

The malicious code in question has been injected into a Node.js module called Event-Stream by a new user who given access to the popular JavaScript library by its original author three months ago. Dominic Tarr, previous maintainer of the repository, said he entrusted its development to a new user called right9ctrl who “wanted to maintain the module.”

The new maintainer then proceeded to release Event-Stream 3.3.6 containing Flatmap-Stream library 0.1.1, where the malicious code resides. On GitHub, Ayrton Sparling explained: “He added flatmap-stream which is entirely (1 commit to the repo but has 3 versions, the latest one removes the injection, unmaintained, created 3 months ago) an injection targeting ps-tree. After he adds it at almost the exact same time the injection is added to flatmap-stream, he bumps the version and publishes. Literally the second commit (3 days later) after that he removes the injection and bumps a major version so he can clear the repo of having flatmap-stream but still have everyone (millions of weekly installs) using 3.x affected.”

The malicious code only executes successfully if its’s used inside the Copay source code, stealing a user’s wallet information such as private keys, which it sends to the copayapi.host URL on port 8080. According to user Nicolas Noble, “If your overall application has both this malicious package and “copay-dash”, then it’s going to try stealing the bitcoins stored in it.”

BitPay said its BitPay app was not vulnerable to the code, noting that it’s still investigating whether the code vulnerability affected any Copay users. BitPay warned, “Users should not attempt to move funds to new wallets by importing affected wallets’ twelve word backup phrases (which correspond to potentially compromised private keys). Users should first update their affected wallets (5.0.2-5.1.0) and then send all funds from affected wallets to a brand new wallet on version 5.2.0, using the Send Max feature to initiate transactions of all funds.”

At press time, the Event-Stream 3.3.6 version has already been taken down, although the Event-Stream library remains available after Right9ctrl released other versions of the module in an effort to hide his malicious code. And the damage, as they say, has been done.

The post Malicious code injected into BitPay’s Copay wallet steals private keys appeared first on Coingeek.

Read More

Buy gift cards at Bitcoin.com Store with Bitcoin BCH

The Bitcoin.com Store went through a major facelift last week that saw the inclusion of additional products, such as new merchandise, art, hardware devices and paraphernalia. Since then, it has continued to add new products in an effort to expand its large line of offerings, and has now gone one step further. The store has partnered with Egifter, a gift card service, and customers can now purchase gift cards for any of more than 300 retailers.

The Egifter Marketplace has been integrated, in a way, into the Bitcoin.com Store. The store will provide an interface to the marketplace to browse and purchase any of the available cards. Among the retail options are Best Buy, AutoZone, Dunkin Donuts, Banana Republic, Applebees, the California Pizza Kitchen and many more.

After making the card selections, users proceed to the checkout page on the store’s site and can make payments with Bitcoin BCH. The store uses Bitpay to process payments and, as such, payments must be made through a crypto wallet that is compatible with the Bitpay Payment Protocol. Once the purchase is complete, the customers will receive a virtual gift card corresponding to their store, or stores, of choice.

According to Bitcoin.com’s eCommerce Manager, Blake Moore, Bitcoin BCH enthusiasts now have hundreds of more reasons to appreciate the digital currency. He said, “Well over 300 cards from the world’s top brands are now available to our valued users which adds a great deal of accessibility.”

Bitcoin.com isn’t just the name behind a store. It offers a range of products, including a mining operation, a news service and a wallet. The wallet has been downloaded more than a million times from the Google Play Store and reportedly has more than 3 million users worldwide. The company is owned by Roger Ver, who recently announced that the company could be considering the launch of a cryptocurrency exchange.

The continued dedication of Bitcoin BCH enthusiasts is showing why the cryptocurrency is the world’s number one digital currency alternative to fiat. It is the only crypto that still adheres to the original design of digital currency as set forth by Satoshi Nakamoto. It continues to receive global merchant adoption and is now used by millions of retailers around the world.

Note: Tokens on the Bitcoin Core (segwit) Chain are Referred to as BTC coins. Bitcoin Cash (BCH) is today the only Bitcoin implementation that follows Satoshi Nakamoto’s original whitepaper for Peer to Peer Electronic Cash. Bitcoin BCH is the only major public blockchain that maintains the original vision for Bitcoin as fast, frictionless, electronic cash.

The post Buy gift cards at Bitcoin.com Store with Bitcoin BCH appeared first on Coingeek.

Read More

BitPay now accepts Bitcoin BCH payments through CoinText

The CoinText Bitcoin BCH wallet was only introduced a few months ago. However, it has continued to innovate and gain a significant user base, most recently expanding into Israel, Palestine and Hong Kong. Now, the wallet’s developers have taken things a step further and have announced that users can make BitPay invoices payments with the wallet.

CoinText works differently than other wallets. It allows a wallet user to send Bitcoin BCH to anyone using either a Bitcoin BCH address or a telephone number. It has received substantial praise for being able to provide cryptocurrency functionality to those where the Internet is not present and for providing a method for individuals to still be able to conduct business in the event that the Internet goes down.

With the latest integration, Bitcoin BCH adoption and acceptance gets a little easier. Any time there are more options to make payments, the ecosystem benefits. Typically, making BitPay payments isn’t a hassle, but having the CoinText option ensures that there is more flexibility and a secondary system in place, should it be needed.

Through the new feature, CoinText wallet users can freely spend Bitcoin BCH at any retailer that uses BitPay through a simple SMS text message. Depending on where the user and retailer are located, this is a huge advantage, as some malls in certain countries, for example, have no Internet access, or a saturation issue that makes it difficult to connect in a timely manner.

An individual doesn’t need to have a CoinText wallet to receive a transfer. If Bitcoin BCH is sent to a phone number that’s stored in a smartphone’s address book, CoinText will automatically create the wallet and deposit the currency. From there, that user will also be provided a link to instructions on how to use cryptocurrency and the wallet.

The addition of the BitPay support may not seem like a big deal to crypto enthusiasts in Western countries, but it should definitely be a huge success in developing and third-world countries. It’s another example of how cryptocurrencies – especially Bitcoin BCH – are continuing to develop and an important step to expand adoption of Bitcoin BCH, the only cryptocurrency that has maintained a retail focus among the digital currencies now available.

CoinText is now available in the US, 16 countries in the European Union, South Africa, Mexico, Chile, Hong Kong, Israel and Palestine. Its beauty is in its simplicity and the ability to literally reach anyone, anywhere in the world with nothing more than a phone number.

Note: Tokens on the Bitcoin Core (segwit) Chain are Referred to as BTC coins. Bitcoin Cash (BCH) is today the only Bitcoin implementation that follows Satoshi Nakamoto’s original whitepaper for Peer to Peer Electronic Cash. Bitcoin BCH is the only major public blockchain that maintains the original vision for Bitcoin as fast, frictionless, electronic cash.

The post BitPay now accepts Bitcoin BCH payments through CoinText appeared first on Coingeek.

Read More

Events platform Big Tickets expands payment options with Bitcoin BCH

Events ticketing platform Big Tickets is now accepting Bitcoin Cash (BCH) payments, following a recent integration with BitPay.

Customers will now be able to use Bitcoin BCH to pay for tickets delivered through the Big Tickets system, opening up a range of festival and conference events for payment through the cryptocurrency. In a statement announcing the integration, Big Tickets said BCH was a natural choice for low-cost, secure payments.

According to the events ticketing platform, “Big Tickets knows Bitcoin Cash is the world’s only digital, low-cost, fast, secure transaction-based currency. The average transaction costs on BCH are consistently $0.002 compared with 2-3 percent of Visa, and they come without the worry of fraud and chargebacks. Pioneering merchants are excited to accept Bitcoin Cash as a payment method due to these advantages.”

CTO Jason Henley said the firm was excited to be one of the first ticketing platforms in the United States to accept payment by Bitcoin.

“We know our dedication to innovation is deserving of a secure and seamless purchase method for our event attendees. The use of Bitcoin Cash is a major social trend we’ve been following and we’re excited to be one of the first event ticketing platforms in the United States to accept the burgeoning cryptocurrency,” Henley said.

Big Tickets’ announcement is the latest in a series of similar integrations, as merchants worldwide continue to switch to BCH for faster, cheaper payments. With transaction costs of just $0.002, and enhanced security over other forms of payment, Bitcoin BCH is proving an increasingly popular payment method worldwide.

Formed in 2003, Big Tickets provides event organizers with a range of tools and analytics, with a focus on marketing and promotional features. With the help of the BitPay integration, individual organisers will now be able to rely on BCH payments, at a time of strong demand amongst consumers. BitPay, in particular, is working alongside forward-thinking merchants to offer seamlessly transactions in bitcoin, while offer settlement in a fiat or cryptocurrency of their choice.

With countless other merchants currently onboarding support for bitcoin BCH, it looks like the Big Tickets announcement is only the latest example of a major online merchant choosing bitcoin over the alternatives. To find out how easy it can be to accept Bitcoin BCH payments with BitPay, read here.

Note: Tokens on the Bitcoin Core (segwit) Chain are Referred to as BTC coins. Bitcoin Cash (BCH) is today the only Bitcoin implementation that follows Satoshi Nakamoto’s original whitepaper for Peer to Peer Electronic Cash. Bitcoin BCH is the only major public blockchain that maintains the original vision for Bitcoin as fast, frictionless, electronic cash.

The post Events platform Big Tickets expands payment options with Bitcoin BCH appeared first on Coingeek.

Read More

HackerOne announces acceptance of Bitcoin BCH payments

The bug bounty platform HackerOne has now implemented BitPay. With that, it becomes the first bug bounty operation to accept Bitcoin BCH and Bitcoin Core (BTC) from its clients around the world, among which are Starbucks, General Motors, Spotify, the US Department of Defense, Lufthansa and more.

In a company press release, HackerOne Chief Operating Officer and Chief Financial Officer Ning Want stated, “Many of our customers have come to rely on making payments in cryptocurrency as it is quickly becoming a popular payment method. It was important to us to continue to offer Bitcoin and Bitcoin Cash to our customers and we can do that through BitPay.”

By adding BitPay’s functionality to the platform, HackerOne can now receive international payments quicker than bank transfers. It also will result in lower costs, a reduction in fraud risk and faster bank settlements. BitPay transaction fees are only 1% of the transaction and confirmations are received in a single business day. With bank transfers, fees can be as high as $100 and can take up to a couple of weeks.

HackerOne is the world’s largest group of hackers and security experts, all working together to uncover software vulnerabilities for its customers. To date, it has reportedly awarded more than $35 million to hackers who have safely reported over 80,000 security vulnerabilities before they could be exploited. The company has its headquarters in San Francisco, and also maintains offices in New York, London, the Netherlands and Singapore.

BitPay’s Chief Commercial Officer, Sonny Singh, stated in the press release, “Using Bitcoin, HackerOne is now able to safely accept payments from clients in Asia, Africa and Latin America that would have been nearly impossible before. HackerOne has a great reputation of product innovation and accepting [cryptocurrency] payments is another example of that.”

BitPay has been around since 2011, pioneering cryptocurrency payments. It offers a digital asset wallet, as well as the BitPay Prepaid Visa® Card. It also facilitates cross-border payments for a number of businesses. BitPay has offices across North and South America and Europe, and the prepaid card is issued by Metropolitan Commercial Bank through a licensing agreement with Visa.

Note: Tokens on the Bitcoin Core (segwit) Chain are Referred to as BTC coins. Bitcoin Cash (BCH) is today the only Bitcoin implementation that follows Satoshi Nakamoto’s original whitepaper for Peer to Peer Electronic Cash. Bitcoin BCH is the only major public blockchain that maintains the original vision for Bitcoin as fast, frictionless, electronic cash.

The post HackerOne announces acceptance of Bitcoin BCH payments appeared first on Coingeek.

Read More

Bitnovo expands boundaries with Bitcoin BCH support

Spanish cryptocurrency trading platform Bitnovo has added support for Bitcoin Cash (BCH), effective September 27. Users of Bitnovo’s Bitcard and N26 bank-free products can now top up their accounts with Bitcoin BCH, alongside LTC or ZCash. Payments using the cryptocurrency are also supported, according to the trading platform.

Bitcard is a crypto-based debit card that allows for easy and fast conversion of cryptocurrency like Bitcoin BCH to fiat currency—the Euro, for now—without users having to go through the bank. N26, meanwhile, is a mobile-based banking service that allows its users to buy and sell cryptocurrencies, among other related functions.

In an interview with news.bitcoin.com, Bitnovo Chief Marketing Officer Roberta Quintillano said, “From today, holders of Bitcard and a N26 account can now top them up easily in Bitnovo platform with Bitcoin Cash. Furthermore, it will be possible to use Bitcoin Cash as payment methods to purchase all the Bitnovo services.”

Bitnovo’s move to integrate Bitcoin BCH follows the footsteps of an increasing number of merchants that have started to accept the cryptocurrency as payment. In the U.S. for example, residents are now able to pay for their TV subscriptions with satellite television provider DISH TV in BCH following the company’s integration with cryptocurrency payment service BitPay.

The partnership with BitPay allows DISH customers to utilize their Bitcoin BCH to pay for monthly subscriptions as well as pay-per-view movies. The company says as a push transaction, customers must send the exact amount of BCH needed to make a one-time payment.

John Swieringa, DISH executive VP and COO, said onboarding Bitcoin BCH—which continues to rise in prominence—allows that company to continue to serve those paying in cryptocurrency.

According to Swieringa, DISH has “a steady volume of customers paying with cryptocurrency each month, and BitPay will allow us to continue offering more choices and convenience to our customers.”

To find out how easy it can be to accept Bitcoin BCH payments with BitPay, read here.

Note: Tokens on the Bitcoin Core (segwit) Chain are Referred to as BTC coins. Bitcoin Cash (BCH) is today the only Bitcoin implementation that follows Satoshi Nakamoto’s original whitepaper for Peer to Peer Electronic Cash. Bitcoin BCH is the only major public blockchain that maintains the original vision for Bitcoin as fast, frictionless, electronic cash.

The post Bitnovo expands boundaries with Bitcoin BCH support appeared first on Coingeek.

Read More

BitPay continues to innovate and enhance the cryptocurrency ecosystem

Only a couple of weeks ago, the blockchain-based payment services company BitPay announced that it had incorporated into its platform the ability for merchants to receive payouts in Bitcoin BCH. It was just the latest example of how the company is striving to stay at the forefront of innovation in order to drive cryptocurrency adoption around the world. BitPay is working tirelessly to help create a worldwide payment system that is efficient, user-friendly and adaptable, and is constantly exploring new ideas and options to help shape the digital currency market of tomorrow.

Since the end of last year, BitPay has implemented the Bitcoin Payment Protocol, BIP70, as the standard for paying BitPay invoices. BIP70 is an enhanced protocol that allows for better communication between a merchant and their customer and provides better security against man-in-the-middle attacks during the payment process. That change took the error rate down to 0.27%.

BIP70 also works to ensure that transactions are conducted only for the proper amount, helping to avoid payment mistakes. Payments that are too large or too small, or that take too long to arrive can be rejected and refunded thanks to BIP70.

Things weren’t always so great at the company. Last year, it fell behind in customer service due to the explosive growth of cryptocurrencies, but quickly righted the ship and got back on course. Now, user requests receive a response within two hours and a complete answer within 24 hours. The customer support team, which now is 500% larger, is available 24 hours a day, seven days a week and is dedicated to providing the best customer experience possible. As of its most recent evaluation, BitPay reports that only 1.4% of all BitPay invoices need any assistance from the company’s Customer Success team.

In an effort to stay ahead and ensure that the Customer Success team is able to handle the amount of traffic adequately and provide top-level responses, BitPay is now launching four new initiatives. It is going to have a staff component of subject matter experts, another of customer success engineers and a third component of customer success managers. The fourth component centers on a support form that is updated more frequently to provide real-time answers to common questions.

The cryptocurrency industry is losing its “Wild West” image. It may take a while, but evidence is seen of this every day, especially through advances such as those offered by BitPay.

Note: Tokens on the Bitcoin Core (segwit) Chain are Referred to as BTC coins. Bitcoin Cash (BCH) is today the only Bitcoin implementation that follows Satoshi Nakamoto’s original whitepaper for Peer to Peer Electronic Cash. Bitcoin BCH is the only major public blockchain that maintains the original vision for Bitcoin as fast, frictionless, electronic cash.

The post BitPay continues to innovate and enhance the cryptocurrency ecosystem appeared first on Coingeek.

Read More
Top