{"id":18743,"date":"2026-03-28T03:03:01","date_gmt":"2026-03-28T03:03:01","guid":{"rendered":"https:\/\/cryptoted.net\/index.php\/2026\/03\/28\/security-alert-smart-contract-wallets-created-in-frontier-are-vulnerable-to-phishing-attacks\/"},"modified":"2026-03-28T03:03:01","modified_gmt":"2026-03-28T03:03:01","slug":"security-alert-smart-contract-wallets-created-in-frontier-are-vulnerable-to-phishing-attacks","status":"publish","type":"post","link":"https:\/\/cryptoted.net\/index.php\/2026\/03\/28\/security-alert-smart-contract-wallets-created-in-frontier-are-vulnerable-to-phishing-attacks\/","title":{"rendered":"Security Alert \u2013 Smart Contract Wallets created in frontier are vulnerable to phishing attacks"},"content":{"rendered":"


\n<\/p>\n

\n

Affected configurations:<\/b> All smart contract wallets created using Ethereum Wallet \u00a0Frontier, version 0.4.0 (Beta 7) or earlier<\/em>. Wallets created with Ethereum Wallet 0.5.0 and all later versions released after March 3, 2016, are not affected.<\/span><\/p>\n

Likelihood<\/b>: Low<\/span><\/p>\n

Severity<\/b>: High<\/span><\/p>\n

<\/g><\/svg><\/a>Summary:<\/h2>\n

Do not use wallet contracts or owner accounts of those wallets that were created by the Ethereum Wallet 0.4.0 or earlier. If you send to (or interact with) a malicious contract it could take ownership of your wallet contract. Create a new wallet and move your funds.<\/span><\/p>\n

<\/g><\/svg><\/a>How to be super safe??<\/h3>\n

Don’t use the vulnerable wallet contracts, AND\u00a0the owner\u00a0accounts of these wallets to send ether and interact with contracts you don’t know!
\nIf you don’t use these accounts and wallets, and upgrade your wallet as\u00a0<\/strong>described here<\/a>, you are safe!<\/b><\/p>\n

<\/g><\/svg><\/a>Details:<\/h2>\n

An attack vector was discovered that affects the smart contract wallets created before the Homestead release (Frontier phase). The attack can happen if an affected wallet interacts with a malicious contract OR if the owner account of an affected wallet interacts with a malicious contract that knows the address of his wallet. An attacker can then impersonate the owner and thus can steal funds or tokens and change the owner of the wallet.<\/span><\/p>\n

If you do not use your wallet and owner accounts with contracts you don’t know, you are safe!<\/strong><\/p>\n

Receiving Ether and sending Ether to non-contract accounts is fine.<\/span><\/p>\n

Also if you configured your wallet with multisig, you are safer, as the attacker would need to make you send with all owners to malicious contract(s).<\/span><\/p>\n

\u00a0<\/p>\n

<\/g><\/svg><\/a>Proposed solution:<\/h2>\n

We recommend that if you created a wallet using the affected versions, you take one of these steps:<\/span><\/p>\n