Beam Privacy Coin Utilizing MimbleWimble Finds ‘Critical Vulnerability’ in its Wallet per Dev Team

A critical vulnerability was found in Beam Wallet. According to a recent tweet uploaded by Beam Privacy, the Beam developer team discovered a vulnerability in its wallet. Apparently, this affects all previously released Beam Wallets both in desktop and CLI.

CRITICAL VULNERABILITY IN BEAM WALLET

9.1.2019 20:20 GMT

Critical Vulnerability was found in Beam Wallet today.

Vulnerability was discovered by Beam Dev Team and not reported anywhere else.

Vulnerability affects all previously released Beam Wallets both Dekstop and CLI.

— @Beamprivacy (@beamprivacy) January 9, 2019

The company says that the vulnerability does not affect wallet data, secret keys or passwords. In order for users to be protected, they must follow very carefully a few steps to solve this issue.

The first thing that users need to do is to stop running Beam Wallets immediately. After it, users will have to uninstall the Beam Wallet application and other executables. However, the database shouldn’t be deleted, neither any other data.

After all, users will have to download the Beam Wallet once again from the official website. It will have the same version numbers as previously published archives.

Beam is the privacy coin that is currently implementing the MimbleWimble protocol. The company will be releasing a proper update with more information and details about this issue. Beam was officially launched back on January 3 and it is the only coin implementing the privacy protocol known as MimbleWimble.

2/4
DO NOT DELETE THE DATABASE or any other wallet data.

The vulnerability DOES NOT affect wallet data, secret keys or passwords

All Beam users are REQUIRED to follow the procedure below IMMEDIATELY!!!

1. Stop your currently running Beam Wallets immediately

— @Beamprivacy (@beamprivacy) January 9, 2019

3/4
2. Uninstall or delete your Beam Wallet application and executables from all machines.
DO NOT DELETE THE DATABASE or any other wallet data
3. Make sure the application was deleted. Check the documentation for the location of Wallet app files (https://t.co/aso6IUTkan)

— @Beamprivacy (@beamprivacy) January 9, 2019

4/4
4. Download Beam Wallet again from the website only (https://t.co/RVkKoGAqN1)
It will have THE SAME version numbers as previously published archives
Make sure the SHA256 of the archive matches with the one published on the website.
5. Install the new application

— @Beamprivacy (@beamprivacy) January 9, 2019