Post
Topic
Board Service Announcements
Re: Gliph - Secure Messaging and Bitcoin Transfers on iOS, Android and the Web
by
TheButterZone
on 27/02/2015, 21:02:45 UTC
Renewing warning against storing private keys in Blockchain Wallet. Rob at Gli.ph claims their API generated a new address/private key when I first linked it to Blockchain (with whitelisted IP), but that address (https://blockchain.info/address/1EKqFXn3UmaZaJP5swqCUm3mbpdp63VhwR) never showed up, so I couldn't have deleted it, by accident (an 8 step process) or otherwise. The first time I saw that address was when he PMed it to me after I complained about his 0.001 not being received at any address in my Blockchain Wallet. He swears up and down that it's working correctly, but clearly it isn't, if private keys are ever getting erased without the possibility of user input.

ETA: This was not an isolated incident of non-theft loss for Blockchain Wallet, and we're lucky it was only a $0.25 loss this time. I'm attempting to gather other reports and get other victims to reply here. Any failure is not an option when "magic internet money" (that can never be recovered once private keys are lost) is involved. If I ran Gliph and was made aware of Blockchain's failure even once, I would yank the integration immediately, not defend it, and not by implication fall back on my Terms of Service's Warranty Disclaimer, Limitation of Liability, Indemnification in allowing any more possible failures.
https://bitcointalk.org/index.php?topic=142139.0
https://bitcointalk.org/index.php?topic=680734.0
https://bitcointalk.org/index.php?topic=321047.0

ETA: The 0.001 that was actually received was just forwarded to xkcd https://blockchain.info/tx/2752d70392978a12883c348b3fcf4c8710534e482764b441c284118c044cfc1b