Nevada

Fortune

Fortress

<![CDATA[<figure class="image"><img src="https://cimg.co/news/124912/329949/adobestock-619771244.jpg" srcset="" width="" class="content-img" alt=""><figcaption>Source: Adobe / overrust</figcaption></figure>Fortress Trust's recent disclosure of a cryptocurrency theft totaling nearly $15 million has shed light on a complex situation involving a third-party vendor and a phishing attack.The vendor has now been identified as ReTool, a reputable San Francisco-based company serving Fortune 500 clients. Retool constructed the portal that allowed several Fortress clients to manage their cryptocurrency funds.The theft, attributed to a phishing attack, prompted Fortress to speed up discussions with blockchain tech firm Ripple for its <a href="https://fr.cryptonews.com/news/ripple-acquiert-fortress-trust-societe-fiducie-agreee-axee-crypto.htm">acquisition</a>. Retool has confirmed that it fell victim to a phishing attack affecting 27 of its customers, but didn't directly reference Fortress in its <a href="https://retool.com/blog/mfa-isnt-mfa/">statement</a>.The attack targeted a specific group of crypto-oriented customers, but those who configured Retool's software as recommended by the company remained unaffected.&ldquo;Although an attacker had access to Retool cloud, there was nothing they could do to affect on-premise customers,&rdquo; emphasized Retool. &ldquo;It&rsquo;s worth noting that the vast majority of our crypto and larger customers in particular use Retool on-premise.&rdquo;Although $15 million is a substantial sum, it represents a small fraction of Fortress's overall assets under management, which total billions of dollars. <a href="https://cryptonews.com/news/ripple-ceo-advises-crypto-startups-avoid-us-suggests-jurisdictions-with-smart-policies.htm">Ripple</a> has made a $15 million down payment to help Fortress reimburse affected customers, as part of their ongoing acquisition deal.<h2 id="the-timeline">The Timeline</h2>According to a Ripple spokesperson, Fortress initially covered most affected customers, and Ripple stepped in to ensure all customers &ndash; particularly one large customer &ndash; were made whole within a week.Fortress initially disclosed the security breach on September 7, without naming the compromised third-party vendor. Ripple, which had already been a minority investor in Fortress, announced its intent to acquire the custodian the following day. The incident expedited the takeover talks, according to Ripple, as they swiftly acted to ensure customer protection.BitGo and Fireblocks, the wallet providers used by Fortress, clarified that their systems were not breached. BitGo's CEO Mike Belshe emphasized that their company was not involved in the breach and criticized Fortress's handling of the situation, as they did not immediately disclose all details.<figure class="media"><oembed url="https://twitter.com/mikebelshe/status/1701322135778820181"></oembed></figure>Fortress CEO Scott Purcell claimed that Belshe was informed of all events regarding the security breach from the moment they had occurred.Swan Bitcoin, a brokerage firm utilizing Fortress' BitGo wallets for client funds, <a href="https://twitter.com/SwanBitcoin/status/1701323701332148337">confirmed</a> that the coins stored in those wallets remained secure throughout the incident.The Nevada Financial Institutions Division, responsible for overseeing Fortress, was informed of the incident on September 1, according to an agency spokesperson. &nbsp;
]]>

Crypto Theft from Fortress Trust Traced Back to Phishing Attack on Cloud Vendor

Table of Contents

Cryptonews.com

Other articles published on Sep 14, 2023

Robinhood Adds Nearly 1 Trillion SHIB in September, Zilliqa Scores Strategic Alliance with Google...

Why Borroe Finance’s Fundraising Model is so Tempting for Startups

Despite Crypto Market Rout in the US, “Clear Heads Will Prevail,” Says Ethereum Co-Founder

Real World Assets Focused DEX, Mauve, Launched Today

Phishing attack on software firm Retool enabled Fortress Trust hack: CoinDesk

Tokensoft and Connext Host World’s First Cross-Chain Distribution, Attract ~1 Million Registrants

Join our free newsletter for daily crypto updates!