Cryptocurrency wallet can be hacked through the word suggestion function

a 33-year-old IT specialist from Germany has shared a non-trivial method of stealing a passphrase to access a crypto wallet.

A Reddit user under the nickname Divinux noticed that the next word auto-suggestion function on a mobile phone can help you find out a passphrase. To do this, it is enough to look through the BIP39 dictionary consisting of 2048 words (for example, Ledger and BitBox use this format for passphrases).

Accordingly, anyone who has entered a passphrase on their mobile phone before can become a victim of the attack. The IT expert recommends clearing the cache for this feature. The man even conducted a series of tests that showed that Google’s GBoard keyboard is the least vulnerable to such a hack — at least it does not give the entire passphrase in the correct order.