SAFU Wallet website went offline after a security breach was discovered and funds were stolen

Just a week after the launch, the SAFU Wallet browser extension wallet was removed from the Google Chrome store, and the project site became unavailable. It happened after reports that this oriented to work with BEP2 tokens based on Binance Chain contains malicious code that steals user funds.

In particular, Oriel Ohayon, CEO of ZenGo cryptocurrency wallet, informed about the danger of using SAFU Wallet. The vulnerability was also confirmed by representatives of Raven Protocol, co-founder and CEO of the Machi X marketplace Leo Cheng and several other developers.

Warning do not use Safu Wallet! Along with @OurielOhayon , @leokcheng , a whitehat hacker by the name of B, and others, we have discovered it has malicious code and is on live on the Chrome store.

Move your funds now if you anything stored there. https://t.co/UI1YvcoWN7

– Raven Protocol (@raven_protocol) October 11, 2019

Before SAFU Wallet resources were unavailable, they all warned of the need to transfer funds to other wallets, confirming that significant amounts had been stolen.

For example, Oriel Ohayon posted a screen from an already deleted extension page, where one of the users reports the theft of funds.

The extent of the damage is still unclear, and it is also unknown whether the malicious code is the work of third-party attackers or the creators of the project are involved in it.

The release of SAFU Wallet took place on October 3. Developers, in particular, were attracted to potential users by the offer to take part in the airdrop for holders of Raven Protocol tokens.

A few days later, the creators of the wallet reported that the extension was downloaded over 1,300 times and was used to create more than 5,000 addresses.

It is noteworthy that the news about the release of SAFU Wallet was also supported by Binance CEO Changpeng Zhao, however, after today's posts, he deleted his Twitter message and does not comment on the incident yet.

Recall that in May , the Binance exchange itself was hacked. As a result of the incidents, 7,000 BTC were stolen.

Follow BlockchainJournal on Twitter !