Crypto Wallet Firm Dfns Says ‘Magic Links’ Have Critical Vulnerability
ReadThe magic link attack fails if the user misses the hijacked email, clicks on the link after it expires, or finds it suspicious that they’d been sent a magic link when they hadn’t tried to log in. (As to this last point, Fayssal says that an attacker could strategically time the link to arrive around when a user might be expected to log into the target service.)

