I just got hit for a ton of eth 3 meta wallets drained. Anyone heard anything or could help point me in the right direction of what to do? No idea how they accessed my funds.

  • Lifter_Dan@alien.topBEnglish
    1·
    10 months ago

    KeePass DB is vulnerable if they can crack the master password. If your master password has enough entropy that it would take so many million years to brute force, then you’ll be fine.

      • Lifter_Dan@alien.topBEnglish
        1·
        10 months ago

        That link describes hashcat which uses some of the methods I’m referring to, it’s dependent on the password quality. Crappy password will be quick.

        It doesn’t decrypt it, but tries many combinations of words etc encrypted to compare against the hash.

        Even with a good password, I never would want anyone storing seeds in keepass, anything on the computer is a no for storing seeds.

      • DigStock@alien.topBEnglish
        1·
        10 months ago

        Anything can be cracked this way, this is just a bruteforce of the master password. It can take 300 centuries to crack using NSA servers if it’s a strong password.