Altcoins Talks - Cryptocurrency Forum

Further Discussions => General Discussion => Topic started by: Kadeem Leon on May 12, 2020, 01:25:30 AM

Title: Online Bitcoin Wallet: Sendbit
Post by: Kadeem Leon on May 12, 2020, 01:25:30 AM

Sendbit is an online wallet where you can use to accept payments and send out payments as well.
Easy to access wallet and it's FREE.
There are various cryptos that you get receive and send out.
For Example: Bitcoin, Litecoin, Dash, Bitcoin Cash.
Now sendbit has an awesome feature where you can list your own coin with your own API.
They have an easy to use dashboard with various functionalities.
Sendbit also use technlogies like HTTP/3, Smart Routing, QUIC and NGINX.

Finally sendbit is a great tool for developers, beginners, small companies or enterprises.
So if you want to check it out for yourself, go to sendbit.io.

Also when you get there, they offer an extra feature where I know you will like.

Title: Re: Online Bitcoin Wallet: Sendbit
Post by: ShadowCrypto on May 12, 2020, 03:56:26 AM

Warning

OP is promoting a new web wallet. They have full control over your private keys.
If you care about your BTC, do NOT use that wallet.

The Domain got registered less than a month ago.

Code: [Select]

Domain Name: SENDBIT.IO
Updated Date: 2020-04-16T18:15:20Z
Creation Date: 2020-04-11T08:53:43Z


---

Edit:

Additionally the provider of the web wallet, doesn't have a clue what they are talking about in the "security" section:

Quote from: https://www.sendbit.io/page/our_security

Application

We use SQL injection filters to prevent CSRF attacks and XSS attacks [...]

This doesn't make sense at all.


And additionally, instead of hashing the password client-side and transmitting the hash to the server, they are transmitting the password in plain text.
POST Request upon registering:

Code: [Select]

user_name=815ff46a-d01a-4582-ace7-9357a066c32d&email=test1%40test.com&password=test1234%21&password_repeat=test1234%21&register=REGISTER


Summary: Don't use that wallet! Even if it is build without malicious intend, already simple steps like not transmitting passwords in plain text aren't implemented.
This wallet is either a scam or unsecure.

Even if you ignore the fact that they have access to your private keys (which you shouldn't ignore), it is extremely unsafe to use that wallet.