History of Parity Wallet and Project Focus Shift
Parity Wallet was once a prominent client in the Ethereum ecosystem, known for its fast synchronization and built-in features. However, its development company, Parity Technologies, has explicitly shifted its primary focus to the Polkadot ecosystem and Web3 infrastructure development, particularly the Substrate framework. This means that Parity Technologies' core work is no longer maintaining the end-user-facing Ethereum Parity Wallet.
The Parity Ethereum client itself transitioned into an open-source collaborative project called OpenEthereum in February 2020, and Parity Technologies no longer directly maintains this client. Furthermore, Parity UI (version 0.3.4) ceased maintenance in mid-2018, and Parity Fether (beta version 0.4.3) also stopped updates in 2020. These changes signify that Parity Wallet, as an Ethereum wallet for general users, has largely reached the end of its lifecycle.
Review of Two Major Security Vulnerabilities in 2017
In its history, Parity Wallet experienced two severe security incidents that caused significant losses to users:
- First Vulnerability (July 2017): A vulnerability in the Parity multi-signature wallet led to the theft of approximately 153,000 ETH, valued at about $30 million at the time. Although white-hat hackers moved around 377,000 ETH using the same vulnerability to protect user funds, the incident still exposed its security issues.
- Second Vulnerability and Fund Freeze (November 2017): Another critical vulnerability was triggered, resulting in approximately 513,774 ETH being permanently frozen in over 500 multi-signature wallets. This asset was valued at over $150 million at the time (some reports claimed as high as $280 million or $320 million). This incident stemmed from a user "accidentally" burning the shared library contract that the multi-signature wallets relied on, affecting approximately 587 wallets, including the Web3 Foundation of Parity founder Gavin Wood.
Parity Technologies expressed deep apologies for the vulnerabilities and collaborated with the community to find solutions. However, due to the Ethereum community's resistance to repeated hard forks to rectify software incidents, believing it could harm the immutability of the blockchain, proposals to recover frozen funds through a hard fork were ultimately rejected.
Parity Wallet's Features and Technical Characteristics (Historical Information)
During its active period, Parity Wallet offered the following core features and technical characteristics:
- Functional Positioning: As a full-node Ethereum client, it had built-in wallet functionality, requiring users to store the complete Ethereum blockchain data locally.
- Account Management: Supported the creation and management of Ethereum accounts, as well as the management of Ether (ETH) and any ERC20 tokens.
- Token Creation and DApp Interaction: Users could create and register their own tokens and interact with decentralized applications (DApps).
- Multi-signature Support: It once supported the setup and management of multi-signature wallets, which was also the trigger point for the two vulnerabilities in 2017.
- Technical Advantages: Compared to other clients, Parity was known for its faster synchronization speed and supported operating systems such as Ubuntu, OSX, Docker, and Windows.
However, the wallet lacked two-factor authentication (2FA) and was not a Hierarchical Deterministic (HD) wallet; instead, it used long passwords (seed phrases) to find keys, which were considered shortcomings in its security design.
Current Status and Risk Warning
Given that Parity Technologies no longer actively maintains the end-user-facing Parity Wallet, and the project has a history of two severe security vulnerabilities that led to a large amount of user funds being stolen or frozen, it is currently not recommended for any user to continue using Parity Wallet. Its client and user interface have both ceased updates, meaning it may have unpatched security vulnerabilities, may not be compatible with the latest Ethereum network upgrades, and will not receive technical support. Users should avoid using any cryptocurrency wallets that have ceased maintenance to ensure asset security.
