Wiki
Biturai Trading Wiki
The Biturai crypto encyclopedia: AI-assisted, data-informed, and continuously quality-audited.
Entropy and Random Numbers in Cryptocurrency Wallet Generation Explained
The security of cryptocurrency wallets fundamentally relies on the quality of random numbers used to generate private keys.
The Bybit Hack of 2025: Lessons for Secure Signature Processes
The Bybit Hack of 2025 involved the illicit transfer of approximately $1.5 billion in Ethereum, stemming from a sophisticated manipulation of the exchange's internal asset management system.
Ledger Connect Kit Hack 2023: Lessons for Wallet Users
The Ledger Connect Kit hack in December 2023 was a significant supply chain attack that affected decentralized applications.
Physical Threats to Self-Custody: The Wrench Attack
The "wrench attack" describes a scenario where physical force or intimidation is used to compel an individual to surrender access to their cryptocurrency holdings.
Identifying Fake Hardware Wallet Shops and Resellers
A hardware wallet is a physical device designed to secure your cryptocurrency's private keys offline. Purchasing these devices from unauthorized or fraudulent sources can lead to the theft of your digital assets.
QR Code Scams in Crypto Payments
QR code scams in cryptocurrency payments involve malicious actors replacing legitimate QR codes with fraudulent ones.
Zero-Transfer Phishing: An Evolution of Address Poisoning
Zero-Transfer Phishing is an advanced scam that manipulates a user's transaction history by injecting a lookalike address via a zero-value transfer.
Keyloggers and Infostealers: Threats to Crypto Wallets
Keyloggers record keystrokes, while infostealers gather sensitive data from devices. Both pose significant risks to crypto wallets by stealing private keys, seed phrases, and login credentials.
Malicious Browser Extensions: A Threat to Wallet Users
Malicious browser extensions pose a significant, often underestimated threat to cryptocurrency wallet users. These extensions can gain deep access to your browser activity, enabling the theft of sensitive data and digital assets.
Fake Airdrop Scams: How Malicious Airdrops Drain Crypto Wallets
Fake airdrop scams are deceptive tactics that use the promise of free cryptocurrencies or NFTs to defraud users.
Eth_sign Phishing: The Danger of Blind Message Signatures
Eth sign phishing tricks users into signing arbitrary data, which attackers then use to gain unauthorized control over digital assets. This is akin to signing a blank check, leading to irreversible financial losses.
Permit and Permit2 Phishing: Signature-Based Attacks Explained
Permit and Permit2 phishing are sophisticated attacks that exploit token approval mechanisms in decentralized finance.
Malicious Token Approvals: Exploiting Unlimited Permissions
Token approvals grant smart contracts permission to spend your digital assets on your behalf, a necessary function for interacting with decentralized applications.
Clear Signing: Making Hardware Wallet Transactions Readable
Clear Signing ensures that hardware wallets display full transaction details in a human-readable format on their secure screen before approval.
Blind Signing: The Hidden Dangers of Unverified Crypto Transactions
Blind signing in cryptocurrency refers to approving a transaction or smart contract without fully understanding its details.
Recognizing Manipulated Hardware Wallets in Supply Chain Attacks
A supply chain attack targets vulnerabilities in the production or distribution of hardware, such as crypto wallets, to compromise their security.
Evil Maid Attacks on Hardware Wallets Explained
An Evil Maid attack involves an adversary gaining temporary physical access to an unattended device to subtly compromise it for future unauthorized access.
Clipboard Hijacking: How Malware Swaps Crypto Addresses
Clipboard hijacking is a malicious technique where malware silently replaces a copied cryptocurrency wallet address with an attacker's address. This tricks users into inadvertently sending funds to the wrong recipient during a transaction.
SIM Swapping: Attack on SMS-2FA and Wallet Access
SIM swapping is a sophisticated cyberattack where fraudsters hijack a victim's phone number to gain unauthorized access to online accounts.
Fake Wallet Support Scams: Understanding Impersonation Attacks
Fake wallet support scams involve fraudsters impersonating legitimate customer service to trick users into revealing sensitive information or transferring cryptocurrency.