What Dev Team Wrote on Ryver
Ralf S said:
Hello @here,
Some of you mentioned this post about a warning for LSK, SHIFT, RISE.
https://boards.4chan.org/biz/thread/2836956There is no reason to panic, we are aware of that API endpoint and the security risk this could cause. They do have a point, and it is important to repeat: ALWAYS use the OFFICIAL https wallet, if you are not running your own node!
No need to say that we NEVER log input. Some users who lost their keys wish we would though.
We do have a fix for this, to be released in the next wallet update. Where we don't use this endpoint at all, and sign transactions at the client side to broadcast to our main nodes.
That way your private keys are safe, because they aren't sent at all. You can compare it to the way MyEtherWallet works.
We hope this explains the case and answers your questions.