2023 Edge Wallet — logging bug sent ~2,000 private keys to Edge servers
Data compromised
Approximately 2,000 Bitcoin wallet private keys in Edge infrastructure logs; losses in low five figures USD
Technical writeup
Verified company disclosure — February 20–22, 2023. Edge identified a vulnerability where visiting certain buy/sell partners inside an EdgeProvider WebView could log the selected wallet object (including private keys) to disk and upload logs to Edge servers. Approximately 2,000 keys were visible on Edge logs (<0.01% of keys generated). Users were urged to upgrade to v3.3.1 and create new wallets. Separate from the August 2026 Zendesk support-email vendor notice.
Root cause
EdgeProvider WebView logging wrote wallet objects including private keys to disk and Edge log servers (patched v3.3.1)