Quote from: Pmalek on Today at 01:02:02 PM

Quote from: fer_coinomi on Today at 04:40:16 AM

Snip

The problem with closed-source software is that independent coders don't have access to your code and can't verify your claims. One side claims that the seed was sent in plain text, you claim it was broadcasted in a HTTPS request. The community can't check and verify for themselves so they have to take your word for it or the word of Cipherblade, or not.

I hardly believe though that someone at Google was searching the records, discovered something that looked like a seed, restored the wallet, and emptied his funds. It is possible in theory, but I don't believe that is what happened.

In the report, it is said that the first transactions into the addresses associated with those where hacked funds were sent received deposits in October 2018, but the Coinomi desktop app that had the vulnerability wasn't released until December 2018. Again, the community has to take your word for it because they can't verify your code and check older versions of the Coinomi desktop client or the mobile apps.

That is still not proof that what he says is true, but there is also no proof when and how many of your apps had the vulnerability.

Thank you for your comments. We don't believe that any side claims that the seed was sent in plain text, the "victim" (aka blackmailer) has always claimed that his seed was sent encrypted to Google and then a Google employee used it to steal his funds. We have millions of users but only his funds was stolen - and stolen by Google. We expect people on this forum to be smarter than that. And yes, you can verify that everything was broadcasted over HTTPS, just ask the "researchers" who made a case out of it in the first place to send you a copy of the wallet executable, install it on a sandbox and run a packet sniffer to see for yourself.

As for the date of release of the first Desktop clients you can also verify it from our announcement on Twitter: https://twitter.com/CoinomiWallet/status/1079825494420451328, you see it's 31 December 2018.

As for your question on how many of our apps had the vulnerability we were totally transparent about it from the very beginning, it was just this version of the desktop client. We have millions of active users, don't you believe that if the "victim"'s claims were true that more people would have lost money with it? Nobody lost any funds with Coinomi though and you can also verify this by a quick search online.

For what is worth, we are working on a solution to address these concerns, although we can't say much at the moment.

Hopefully this answers your questions. Thank you for your support.