Wallet theft

Please note however that blackwallet was only an account viewer and that no keys were stored on the server!”

Someone stole 400k from a web wallet. But the message above indicates the problem was the local part of account viewer. The  users handheld or laptop had a virus  hunting for account viewers and grabbing with contents of corms.  The virus likely came from a crank phisher.

Here is the rule. If it is secret stuff, it remains inside the secure element. The secure element has proven macros that generate the encrypted token as needed, which is then sent. Only your thumbprint and passcode needed.