👁️ How to unlock Telegram’s new wallet — and why it still has security issues

⚫️ On Tuesday, we covered the security measures Telegram had built into its new wallet. Today’s post is something of a response to our own piece. Telegram Wallet is finally starting to roll out to users, and early testing has already uncovered a few concerning issues.

⚫️ The first — and most serious — is privacy. Right now, the transfer interface can reveal another Telegram user’s TON address. There are no settings yet to disable incoming transfers or hide your address. Once someone has it, they can inspect your balance and full transaction history onchain. Transfers between wallets could also be used to link different Telegram accounts together. For OSINT researchers and scammers, that’s a goldmine.

⚫️ The second issue is access from new devices. If you log into Telegram on a new device, the Money section becomes available there too. To be fair, the wallet asks for your two-factor authentication password before the first transfer. Still, temporarily restricting outgoing transfers from newly logged-in devices would add a useful extra layer of security.

⚫️ By the way, if you want to unlock Money yourself, all you need is to receive 0.1 GRAM from someone who already has access. There’s another way too: open your own Telegram profile from a second account, copy the TON address shown there, and send 0.1 GRAM to it. Once the transfer arrives, Money should appear in both Settings and the attachment menu.

@thedailyton