For users of the MetaMask extension before version 10.11.3, three necessary conditions would have led to the potential vulnerability. They are: (1) an unencrypted hard drive, (2) having imported a secret recovery phrase into a MetaMask extension on a device that was compromised, stolen, or has unauthorized access, and (3) having used the “Show Secret Recovery Phrase” checkbox to view one’s secret recovery phrase on-screen during the import process.
Continue Reading on Coin Telegraph
Source: Cryptocurrency - investing.com