The creator of XRP tipbot, Wietse Wind has updated the tip tip security that would otherwise allow attackers to reclaim unclaimed Twitter handle tips.
Wietse Wind tweeted:
"I just added a little bit of security @xrptipbot." By changing your Twitter handle, TipBot gives you the ability to migrate your balance (from the old to the new handle.) However, if someone forgets to do so, a attacker could register the old handle and request the balance. "No more"
The problem with the tipbot was noticed by @michahesse and informed about Wietse Wind, which was corrected by updating the security. After the new update, users who change their handles must update their donation QR codes and destination tags as well.
This will help users keep suggestions in their accounts and make sure that attackers do not take advantage of this loophole. The security update came with an error that was re-notified by users to the creator who preceded it.
The tipbot allows users to tip XRP on Twitter and Reddit with just their handle names. The creator had said before he fell in love with XRP after seeing an interview with Ripple's CTO, David Schwartz.
A Twitter user, @Vigril_Hawkin asked Wietse:
"Strictly out of curiosity: if one changed their handle and was taken by another, @xrptipbot blocked that account as it was at the time of the change and then a" new "account is created for the person who claimed that handle? "
"Exactly, so when the user with the modified handle logs in with the new handle, TipBot offers a migration of the balance."
Another user, Kryptonian_23 asked:
"Could someone get out if he banned his Twitter account, and was it never possible to lift the ban?"
Wietse replied to the previous saying:
"It would be a problem, yes, but most of the users who did this got my funds reimbursed manually by checking them and sending them back if they were deposited from a personal account instead of an exchange, so I can check if have access to the account "
The tip tip has come a long way from a regular tipbot to updates that allow users to open a paper account directly on the tipbot. Prior to this, users had to link their Twitter accounts or other social media to create a new account, but the November 20 update changed it.
Wietse Wind has become an important member of the XRP community after creating tipbots. In addition, Wind plans to start a new software company that develops useful products such as XRPtipbot or consumer-oriented tools that are currently needed, but absent for the Led XRP registry.
Subscribe to the AMBCrypto newsletter