Friend​.tech offers login removal solutions after SIM-swap reports

Friend.tech has enabled features for users to add and remove login methods on personal accounts after SIM swaps gave hackers access to personal user information.

The decentralized social network Friend.tech took to social media to announce an updated feature that will allow users to add and remove various login methods used to access their accounts after reports of SIM-swap attacks emerged. 

On Oct. 4, Friend.tech said the settings had been made accessible via the app, with users needing to tap their wallet balance to make changes.

The platform continued its post by saying it had received inquiries from users as to why it had yet to enable a two-factor authentication passcode feature.

Friend.tech said that in its current state, the feature would most likely cause users to lock themselves out of their accounts. It said it had suggested UX updates to Privy, the company it uses to enable privacy features.

“Privy is working diligently to implement this and we will integrate the feature when they have finished.”

In a Q&A on Oct. 2, some Friend.tech users complained that they were not prompted to confirm their passcodes and that when mistyped, neither Privy nor Friend.tech could reset them.  

Meanwhile, users have been responding to the update, with many saying they were already locked out of their accounts.

One user complained that although they removed the number and replaced it with an alternative type of authentication, it did not log out sessions on other devices, which may still allow hackers to be logged in. 

Related: Decentralized social networks have a retention problem, say execs

These updates came as the platform experienced exploits on Oct. 4, during which users reported their accounts had been compromised after hackers took control of their mobile numbers, a type of attack known as a SIM swap. 

According to reports, over 100 Ether (ETH) was drained in just a week as a result.

The exploits continued into Oct. 5, by which time the scammers behind the compromises had been able to net at least $385,000 worth of Ether.

This all follows significant revenue increases for Friend.tech, with surges totaling 10,663 ETH and its total value locked hitting more than 30,000 ETH. 

Magazine: Blockchain detectives: Mt. Gox collapse saw birth of Chainalysis

Leave a Reply

Your email address will not be published. Required fields are marked *

Please enter CoinGecko Free Api Key to get this plugin works.