read.cash Log in
@Read.Cash edited

Is your money safe?

We've got quite a few articles and comments from people that seem to assume that if somebody stole your password they would automatically get your money. Even @Telesfor , who is generally pretty well-versed in these things seems to this so. This is not true. To get your money a thief needs access to your seed phrase. Having just your password is **not enough**. Don't believe me? Let's see. I've created an account @NoSeedNoMoney . This account has about **$200** in balance.

And here:

You can even check the block explorer: https://explorer.bitcoin.com/bch/address/bitcoincash:qzwjq2d77t9le4cv63ssahx9y09a4mhrhvwwxhcuj3 I should be careful to protect my password from thiefs, right? Keep my password, which is `123verysecret` for the account `NoSeedNoMoney` a total secret, right? Ooops... Did I just tell you my password? I surely did. Don't get it? Let me try again: My login: `NoSeedNoMoney` **My password:** `123verysecret` Balance: ~$200 **First one to take it gets to keep it!** **EDIT (24 hours later):** Even with password right in the open, nobody was able to steal the money, we returned it to where it originally came from via this transaction. Someone even decided to change the password :) that still didn't help to steal the money. Your money is safe, unless a) somebody has physical access to your computer; b) somebody has access to your seed phrase; or c) your computer has a virus, so that hackers have full access to it. https://explorer.bitcoin.com/bch/tx/5d1a248b43378ca146ea568433429a2c28fadd7ec764b91f1cba7ec9f2908d45 But you won't be able to take it, since only **my** **device** has the seed phrase. **My account at read.cash** (which is what my password protects) doesn't have that seed phrase, so if you try to login with my password, you will be notified that your device doesn't have a seed phrase associated with this account. That means that if somebody stole your money, then one of the following is true: The thief bot access to your computer/mobile phone and sent your money from your device; The thief got access to where you store the seed phrase; You have a malware or virus that gives hackers access to their device (sometimes that can be a application that gives you free money or free services, like most of free VPN services, or "phone mining" apps - ask yourself why would a company give you something for free that they normally sell? What do they get in return?) Ok, so if read.cash is so secure, then why do we keep telling people not to keep more than $20 in their online wallet? Easy. Because even the biggest companies are vulnerable to server hacks. If hackers got to our infrastructure (it's hard, but even the biggest companies fall victims to this), then hackers could potentially replace the wallet code from an honest wallet that we have to something like "When a user logs in, just send all money to my account using user's seed phrase". **So far, that has not happened**, but to protect you from that risk we ask you not to keep big amounts in your online wallet or accept the risk. But frankly, it's possible even with a phone app or a desktop app. You don't know what code is there and let's be honest, even if you had access to the code, you have no idea how to review it. (Ok, some of you know, but they are less than 1% of all people) So a wallet developer on a rampage could just as easily replace their honest wallet code with "send all money to us, ok, thanks bye!" and the next time you open your wallet on your phone - there's $0.00. So far that hasn't happened either, but it's possible too. As for @Sarahmay article @Sarahmay published an article that somebody took the money. https://read.cash/@Sarahmay/i-need-someone-will-help-me-7af3102b She claims that this transaction was not made by her. https://sigma.rcimg.net/images/5/6/9/Sarahmay/115e68b5/a460a3e4c78ae331db3ff4bdcb76f2e4.jpg **She's right. She didn't do that transaction**, because it's a transaction were somebody sent **her** $0.01 as a tip:

If you have questions like this, please don't write articles starting a public panic, but email us at hello@read.cash instead. And, dear @Broker you get a personal **downvote** from us for trying to capitalize on the panic that has no reason: https://read.cash/@Broker/is-your-money-safe-with-readcash-034a6e60 But read.cash sooner or later has to take up steps to make its wallet more robust and hack proof. Dear @Broker , we took **a lot of steps** to make our wallet secure, we have thousands of users to confirm its security. You can confirm it yourself - login with the password we provided above and enjoy the security. Unless you have a virus or a thief with a physical access to your device or your seed, your money is safe. Don't spread the panic. And don't forget to keep your seed words secure. If you lose them - we won't be able to help you. Your money will sit forever on the blockchain, just like these guys. https://read.cash/stats#Dormant_Wallets_Balance,_USD_eq. **EDIT:** Some people opened the account and even commented below. The money is still untouched. **UPDATE: The money** **was eventually found****, nothing was stolen.** https://read.cash/@Sarahmay/i-found-my-lost-payment-from-readcash-3e173602

$1.75

97 comments

Log in to join in Reading is open to everyone. Replying needs an account.