Quote from: mersal on November 05, 2020, 07:38:19 PM

Quote from: bob123 on November 05, 2020, 07:19:02 PM

Quote from: mersal on November 04, 2020, 07:08:12 PM

Used Coinomi in the past for some altcoin storage and never had any issues with them personally, probably they have bugs but, Do they really have vulnerabilities?

Coinomi had a really severe vulnerability where they sent the mnemonic code to the google server to check the spelling of the words.
While mistakes can happen, the developer claimed that this isn't as sever since google employees stealing funds would be unlikely. They completely ignored any other attack surface coming from that vulnerability.

The really important thing is not that the vulnerability existed, but the missing competence from the developer to acknowledge it. There are better wallets with more competent developers available.

Thanks for the clear explanation, I didn't know that this vulnerability existed with Coinomi but luckily I am not affected by it. Still have that wallet but I don't think any considerable amount left in there. Still the vulnerability exists with it or they resolved it?

Only desktop version was affected and from their response article the vulnerability was in the plugin they used and not in wallet code itself.

You can read more here if you like: https://medium.com/coinomi/official-statement-on-spell-check-findings-547ca348676b