Three Programmers Insert Backdoor into iToken Wallet to Steal Wallet Private Keys, Illegally Obtaining a Total of 27,622 Mnemonic Phrases

On April 16th, it was reported that three programmers inserted a "backdoor" into the iToken wallet application to illegally obtain users' digital wallet private keys and mnemonic phrases. They were sentenced to three years in prison and each fined 30,000 yuan.

According to the investigation, the three individuals illegally obtained a total of 27,622 mnemonic phrases and 10,203 private keys, successfully converting 19,487 digital wallet addresses. The three defendants were responsible for writing the request logic code, setting up the back-end server, purchasing domains, and encrypting private keys. The court also ruled that they are prohibited from engaging in network security management and network operations, as well as related work, for three years after completing their sentences.