I came across a post a day or two ago that I didn't think much of, and now I can't find it. Just saw two more posts that look similar, and they’re in Chinese. They’re talking about a seed phrase converter that turns seed phrases into important info like private keys and more.
It seems like this person took some code from a site I recognize, https://iancoleman.io/bip39/, and just translated it into Chinese. I have a feeling they might've added a backdoor to snatch people's seed phrases to access wallets and swipe coins.
Here are the two posts:
BIP32 Mnemonic Converter
Notes on using BIP32 mnemonics
Can anyone help figure out if this converter is trustworthy? Seems like it might not even be open source.
Thanks. I guess as much. He even used ChatGPT for it. Although, I do not know but I was thinking the way I tag people these days is getting too much. The reason I decided to ask. Yet it is still a scam.
I'm 99.99% sure it's a scam. Whenever i click "Generate" button, it always create POST request. While the data itself is either encoded or encrypted, the data is different on each POST request.
Anyway, i'm leaving negative feedback to those users.
And in general, i expect they also use it to generate code which leads to buggy software.
This is the most recommended:
You can download the standalone version of the same tool from the GitHub repository https://github.com/iancoleman/bip39. To use it, download the bip39-standalone.html file from the releases and open it in a browser. You can also compile it from source using the command python compile.py.
This is perhaps the most recommended setup to use iancoleman. But, in general, I wouldn't recommend anyone using iancoleman to generate seed phrases, because... JavaScript.
@Charles-Tim Your links are broken or not visible on the forum.
Also note that it uses the name and logo of the OneKey hardware wallet in an attempt to lend credibility to the site:
There is no issues tab on the project's github for users to report possible bugs and vulnerabilities in the code.
Although the description at the bottom of the site states that the code is 100% open source, I'd not use it in any way to generate my mnemonic phrases or restore keys.
The code doesn't add any improvements in relation to iancoleman, it's simply a copy and paste, so i'm not the best person to say that the site is 100% reliable or malicious, but in any case, it's better not to use it in real use cases.
These days I was searching on Google out of curiosity for sites similar to iancoleman, most of them are copies of the same, that is, there are several out there and the chance of them being malicious is 99.9%