Blink Wallet: mobile prerelease restores PIN lockout and seed-phrase screen protections
Release notes for the Blink mobile wallet prerelease 3.0.44 list changes to access protection. The app lock is now kept in place through the logout it triggers. The escalating delay after incorrect PIN entries is back and keeps growing after the attempt limit is used up. Seed-phrase screens are now gated by the screen guard and fail closed. This implies that earlier builds could let the lock be interrupted during logout, had no escalating PIN lockout, and did not reliably protect seed-phrase screens with the screen guard. The release also adds Enhanced-mode telemetry behind an Incognito privacy gate. The source describes this as a prerelease and gives no exploitation details or deadlines.
If you hold funds in the Blink mobile app and rely on the PIN or app lock while other people may have physical access to your phone, do not treat the PIN as your only barrier until you are on a build with these changes. Turn on the operating system screen lock, keep your seed backup offline, and do not open seed-phrase screens while the screen is being recorded or shared. Update to a build with these fixes once it is available in your installation channel. If your build already includes them, no action is needed. Enable Enhanced-mode telemetry only deliberately.
Source: github.com