FB pixel

$10k challenge to breach crypto wallet secured with biometric liveness detection



ITBiometrics is offering a $10,000 prize to the hacker that can breach the ITBx, its “ultra-secure, cold hardware fingerprint wallet” with biometric liveness detection, the company announced.

The company plans to release the first cryptocurrency wallet prototypes in the upcoming weeks. According to the company’s website, the product delivers high-level security due to a biometric fingerprint reader that can detect liveness by reading the user’s pulse.

ITBiometrics claims its innovative biometric fingerprint recognition technology prevents fingerprint spoofing. In a video demonstration two years ago, Andy Finch, ITBiometrics’ CEO, hacked an iPhone with a Gummy Bear to show how easy it is to copy a fingerprint to unlock an iPhone.

Finch made an imprint of his thumb on gelatin material found in gummy bears and an imprint on a silicone mold to capture it and ensure high fingerprint quality. The piece of gelatin instantly unlocked the phone, but not ITBiometrics’s reader with liveness sensing capabilities.

A hack of the ultrasonic fingerprint sensor in Samsung’s Galaxy S10 smartphone likewise indicate the system does not include liveness detection.

The ITBx Fingerprint Crypto Wallet also incorporates multi-signature authentication, open-source storage, and ephemeral key wrapping—features that will give hackers an even harder time, the company argues.

The contest invites both professionals and amateurs to try and breach the system to ultimately confirm the opportunities biometric security provides for cryptocurrency wallets. The individual who can hack the wallet will have to share the method used, and allow the company to use her or his name in testimonials and PR campaigns.

At this year’s Def Con virtual hacking conference, security researcher Yamila Levalle from Dreamlab Technologies explained how she went around the biometric authentication feature in multiple fingerprint readers simply by using a low-cost 3D printer. Last year at the GeekPwn conference a team from Tencent’s X-Lab demonstrated a low-cost method of spoofing the fingerprint sensors of smartphones with stolen latent prints.

Article Topics

 |   |   |   |   |   | 

Latest Biometrics News


HHS removes Login.gov from grantee payment system after cyberattack

The U.S. Department of Health and Human Services has removed Login.gov from its grantee payment platform after a security breach…


City of Clemson pilots Intellicheck ID verification to prevent underage drinking

Identity verification provider Intellicheck and the city of Clemson have launched a 12 month pilot program that uses identity verification…


Rumors of liveness detection’s defeat have been greatly exaggerated

Photo and video face filters are perhaps the most mainstream use case for augmented reality –  and an illustrative test…


Companies House takes new measures to fraud fight, but not biometric IDV

Companies House, the UK’s business registry, has begun rolling out new tools to fight fraud and help cleanse the register…


Mitek: quarterlies, annuals, SEC actions

April 4, 2024 – Mitek is getting back on track with its financial reporting, which may be more reflective of the…


Jamaica parliament soon to receive draft digital ID regulation for scrutiny

Plans are being finalized to send the draft regulation on Jamaica’s digital ID program to the country’s parliament for examination…


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Most Read From This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events