According to Deep Tide TechFlow, on May 8, the 'Web3 Escort Program' initiated by BitsLab discovered a serious vulnerability in the customer service system of a well-known wallet client. The vulnerability allows an attacker to replace the session ID, traverse user chat history, and forge messages sent by official customer service, leading to the leakage of sensitive information.
The BitsLab team analyzes the causes of vulnerabilities and attack methods through technical analysis, proposes precise repair measures, and enhances the privacy and security of wallet clients. This repair further highlights the contribution of the BitsLab team and the 'Web3 Escort Program' to the security of global blockchain assets.