Rewards Withdrawal & Security Update Dear Minimalists, We have been eagerly watching you all submitting your Withdrawal Requests and are massively excited for the Token Distribution Event next week! We have also noticed that some of you have, in haste, lost access to your node as a result of not following the recommended security steps. There are two lessons here: 1) Read the instructions fully and make sure you understand them before taking action! 2) Don’t delete your nodes! Our goal is to empower people to opt-out of centralised systems by running a Minima node, however this comes with great responsibility. We believe in second chances (but not third!) We have many newcomers to crypto in the community and naturally, we don’t want see anyone losing their coins, so if you have lost access to your node since requesting withdrawal, you now have a chance to submit a new Wallet address to us, using the updated MiniDapp available from the MiniDapp website: https://minidapps.minima.global/. This will only be possible until the end of day on the 20th March, distribution begins on 21st. From the 21st March, only YOU will be responsible for your own coins… take care to manage your nodes by reading our instructions carefully. You do not need to re-submit your Withdrawal request if you have taken all necessary steps to secure your node. Security for All Users Do not clear the app data for the Minima app or delete the Minima data folder (minimadocker9001) - this will wipe your node and you will need to restore from a backup. Backups are the easiest way to restore without needing your seed phrase. Take them often, keep them safe and do NOT share them with others. Encrypt your private keys with a password using the Vault, so no-one can access your funds if they get access to your device. Android:https://docs.minima.global/docs/runanode/selectplatform/android_v9_and_up#secure-your-node All users: https://docs.minima.global/docs/runanode/securefunds IMPORTANT Security Update for Server users We have seen that far too many of you have started your nodes using the default MDS password - 123. If this is you, CHANGE THIS NOW! 1. Remove your node https://docs.minima.global/docs/runanode/selectplatform/linux_vps#how-to-remove-a-node 2. Start a NEW node setting a SECURE PASSWORD - you will get a NEW SEED PHRASE https://docs.minima.global/docs/runanode/selectplatform/linux_vps#start-your-node 3. Install the new MiniDapp to your new node and re-submit your Withdrawal Request to your new node. It is your choice, but no-one deserves your coins more than you! Server users on Docker using RPC If you previously enabled RPC by using ports 9001:9005 when setting up your node to use CURL, we noticed a vulnerability in the previous set up instructions involving UFW firewall and Docker. If you opened port 9005 in Docker and are using UFW, please remove your node and start a new one following the new instructions at https://docs.minima.global/docs/runanode/selectplatform/linux_vps#how-to-enable-rpc-advanced-users . You can check if you opened port 9005 in Docker by running docker inspect minima9001 from your server command line and checking the port bindings for your node. Once this is done, install the new Rewards MiniDapp to re-submit your withdrawal request. Thanks, Your Minima Team

Rewards Withdrawal & Security Update Dear Minimalists, We have been eagerly watching you all submitting your Withdrawal Requests and are massively excited for the Token Distribution Event next week! We have also noticed that some of you have, in haste, lost access to your node as a result of not following the recommended security steps. There are two lessons here: 1) Read the instructions fully and make sure you understand them before taking action! 2) Don’t delete your nodes! Our goal is to empower people to opt-out of centralised systems by running a Minima node, however this comes with great responsibility. We believe in second chances (but not third!) We have many newcomers to crypto in the community and naturally, we don’t want see anyone losing their coins, so if you have lost access to your node since requesting withdrawal, you now have a chance to submit a new Wallet address to us, using the updated MiniDapp available from the MiniDapp website: https://minidapps.minima.global/. This will only be possible until the end of day on the 20th March, distribution begins on 21st. From the 21st March, only YOU will be responsible for your own coins… take care to manage your nodes by reading our instructions carefully. You do not need to re-submit your Withdrawal request if you have taken all necessary steps to secure your node. Security for All Users Do not clear the app data for the Minima app or delete the Minima data folder (minimadocker9001) - this will wipe your node and you will need to restore from a backup. Backups are the easiest way to restore without needing your seed phrase. Take them often, keep them safe and do NOT share them with others. Encrypt your private keys with a password using the Vault, so no-one can access your funds if they get access to your device. Android:https://docs.minima.global/docs/runanode/selectplatform/android_v9_and_up#secure-your-node All users: https://docs.minima.global/docs/runanode/securefunds IMPORTANT Security Update for Server users We have seen that far too many of you have started your nodes using the default MDS password - 123. If this is you, CHANGE THIS NOW! 1. Remove your node https://docs.minima.global/docs/runanode/selectplatform/linux_vps#how-to-remove-a-node 2. Start a NEW node setting a SECURE PASSWORD - you will get a NEW SEED PHRASE https://docs.minima.global/docs/runanode/selectplatform/linux_vps#start-your-node 3. Install the new MiniDapp to your new node and re-submit your Withdrawal Request to your new node. It is your choice, but no-one deserves your coins more than you! Server users on Docker using RPC If you previously enabled RPC by using ports 9001:9005 when setting up your node to use CURL, we noticed a vulnerability in the previous set up instructions involving UFW firewall and Docker. If you opened port 9005 in Docker and are using UFW, please remove your node and start a new one following the new instructions at https://docs.minima.global/docs/runanode/selectplatform/linux_vps#how-to-enable-rpc-advanced-users . You can check if you opened port 9005 in Docker by running docker inspect minima9001 from your server command line and checking the port bindings for your node. Once this is done, install the new Rewards MiniDapp to re-submit your withdrawal request. Thanks, Your Minima Team