Three programmers implanted a backdoor into the iToken wallet to steal the wallet private key, illegally obtaining a total of 27,622 mnemonics

On April 16th, three programmers were sentenced to three years in prison and fined 30,000 yuan each for illegally obtaining users' digital wallet private keys and mnemonic words by implanting a "backdoor" in the iToken wallet application.

It was identified that the three individuals illegally obtained 27,622 mnemonic words, 10,203 private keys, and successfully converted 19,487 digital wallet addresses. The three defendants were responsible for writing request logic code, setting up backend servers, purchasing domain names, and encrypting private keys.

The court also ruled that the three individuals are prohibited from engaging in network security management, network operations, and related work within three years after the completion of their sentence.