Skip to main content
  1. Home
  2. Computing
  3. News

Researchers hack John McAfee’s ‘unhackable’ Bitfi cryptocurrency wallet

Add as a preferred source on Google
Image used with permission by copyright holder

Antivirus pioneer John McAfee’s cryptocurrency wallet has been hacked again by security researchers. McAfee announced a partnership with Bitfi in late July to promote the security of that company’s cryptocurrency wallet. However, it seems that Bitfi was prematurely confident about the security of its digital wallet, as hackers have been able to penetrate the McAfee Bitfi account numerous times. In the latest hack, researchers were able to send signed transactions with the wallet despite Bitfi’s security mechanisms.

After completing the hack, researchers are confident that they have fulfilled the requirements needed to claim the $100,000 bug bounty prize announced by McAfee. “For all you naysayers who claim that ‘nothing is unhackable’ & who don’t believe that my Bitfi wallet is truly the world’s first unhackable device, a $100,000 bounty goes to anyone who can hack it,” McAfee tweeted in July. The bug bounty required hackers to demonstrate that they’re able to modify the device, connect to Bitfi’s servers, and send data from the device.

Recommended Videos

Researchers were able to gain root access to the device two weeks ago, and they have confirmed that the device was still connected to Bitfi’s servers. To fulfill the last requirement, security researcher Andrew Tierney confirmed that he was able to send the device’s private keys and passphrase to a remote server, The Next Web reported.

“We have sent the seed and phrase from the device to another server — it just gets sent using netcat, nothing fancy.” said Tierney. “We believe all [conditions] have been met.”

The latest hack on McAfee’s Bitfi wallet comes within days after 15-year-old Saleem Rashid demonstrated that he was able to crack the wallet to play Doom on the device. In that attempt, even though Rashid was able to hack the wallet, he was not able to access the cryptocurrency that was stored in McAfee’s account. McAfee had downplayed Rashid’s hack in a tweet, noting: “A video played on your Bitfi wallet has nothing to do with the safety of your funds. This is amateur hour, not a hack!” McAffee has not offered any comment about the most recent hack conducted by Tierney.

Since announcing his partnership with Bitfi, McAffee said on August 13 that he is now CEO of Luxcore, a company that works on enterprise blockchain solutions.

If you’re a cryptocurrency investor, be sure to check out our guides to some of the best bitcoin wallets.

Chuong Nguyen
Silicon Valley-based technology reporter and Giants baseball fan who splits his time between Northern California and Southern…
Moonshot tells Kimi AI to code away, but leave the hacking alone
Moonshot is clipping Kimi AI’s hacking wings before letting it loose
Moonshot AI

Chinese AI startup Moonshot AI is deliberately limiting the hacking capabilities of its latest artificial intelligence model, highlighting a growing dilemma for the industry: how do companies make AI more powerful without making cyberattacks easier to carry out?

The company introduced Kimi K3.1 Pro on October 24, describing it as a highly capable, open-weight model with around 3 trillion parameters. Unlike conventional AI services that operate entirely through a provider's servers, open-weight models allow developers to download the underlying model files, run them on their own systems, and modify how they work.

Read more
Google changes its Workspace privacy promise on ads, and opting out limits Personal Intelligence
Smarter AI answers, with a side order of ads.
AI mode in Google Search

There’s no such thing as a free recommendation. Google’s latest policy tweak is a clear reminder. Google has long promised that your Gmail, Drive, and Google Photos content never helps it personalize ads. 

However, since October 16, 2026, its privacy policy adds a catch. The promise lapses if you let other ad-showing Google services use that content. That means using Personal Intelligence, an opt-in tool that lets Google’s AI search read your connected apps, does exactly that (via Google).

Read more
OpenAI is locking its most advanced AI models offline after a string of security scares
OpenAI’s fake internet is a safety fix and an admission.
openai-anthropic-logo-on-screen

Part of me is relieved that an AI lab is hitting the brakes. The other part wishes it hadn’t taken real incidents to get there.

OpenAI said Friday that its most advanced models will now train without live internet access. Instead, they’ll practice on a cached, simulated copy of the web.

Read more