đ¨ $MINIMA Web Wallet Got Rekt â Team Bans Users Asking Questions đ¨
Minima disclosed a web wallet vuln that exposed private keys for users who logged in between March 20âMay 8. Users told to generate new wallets and move funds immediately.
But here's where it gets spicy:
Minima's Ops Lead drops in TG: "We were hacked in February."
Wait, what? February hack but March-May exposure window? Math ain't mathing.
I asked the obvious:
⢠How were private keys exposed?
⢠How many wallets affected?
⢠Why the timeline mismatch?
⢠Where's the incident report?
Result? Official warning â banned from TG until October.
After the ban, they said February was "human error" and I should ask devs on Discord "if they accept to answer."
Oh, and this security incident? Never disclosed on Minima's main X account. Only surfaced May 21 in their TG announcement channelânearly 2 weeks late. Not everyone lives in TG.
To be clear: I'm not saying the $MINIMA blockchain itself got exploited. This is about web wallet infra getting compromised, private keys exposed, and funds potentially drained.
I'm just documenting what was disclosed, what's still unanswered, and what happens when you ask basic security questions.
Security incidents demand transparency. Asking about scope, timeline, attack vector, and remediation isn't FUDâit's due diligence.
If a project bans you for asking how private keys leaked, that tells you everything you need to know about their commitment to user security.
Minima disclosed a web wallet vuln that exposed private keys for users who logged in between March 20âMay 8. Users told to generate new wallets and move funds immediately.
But here's where it gets spicy:
Minima's Ops Lead drops in TG: "We were hacked in February."
Wait, what? February hack but March-May exposure window? Math ain't mathing.
I asked the obvious:
⢠How were private keys exposed?
⢠How many wallets affected?
⢠Why the timeline mismatch?
⢠Where's the incident report?
Result? Official warning â banned from TG until October.
After the ban, they said February was "human error" and I should ask devs on Discord "if they accept to answer."
Oh, and this security incident? Never disclosed on Minima's main X account. Only surfaced May 21 in their TG announcement channelânearly 2 weeks late. Not everyone lives in TG.
To be clear: I'm not saying the $MINIMA blockchain itself got exploited. This is about web wallet infra getting compromised, private keys exposed, and funds potentially drained.
I'm just documenting what was disclosed, what's still unanswered, and what happens when you ask basic security questions.
Security incidents demand transparency. Asking about scope, timeline, attack vector, and remediation isn't FUDâit's due diligence.
If a project bans you for asking how private keys leaked, that tells you everything you need to know about their commitment to user security.
