Bitcoin

CoinsPaid

Read

CoinsPaid, an Estonian crypto-payments service provider, fell victim to a cyberattack on Friday, Jan. 5, resulting in the theft of roughly $7.5 million in cryptocurrency on the Binance (<a href="https://crypto.news/price/bnb/" data-type="link" data-id="https://crypto.news/price/bnb/">BNB</a>) and Ethereum (<a href="https://crypto.news/price/ethereum/" data-type="link" data-id="https://crypto.news/price/ethereum/">ETH</a>) chains. 
Real-time security alerts from the Cyvers platform <a href="https://twitter.com/CyversAlerts/status/1743639524448587799?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1743639524448587799%7Ctwgr%5E13591879ff319fa2087cb5c2be4f92d3649a930f%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcrypto.news%2Fcoinspaid-gets-hacked-again-7-million-goes-missing%2F" data-type="link" data-id="https://twitter.com/CyversAlerts/status/1743639524448587799?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1743639524448587799%7Ctwgr%5E13591879ff319fa2087cb5c2be4f92d3649a930f%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcrypto.news%2Fcoinspaid-gets-hacked-again-7-million-goes-missing%2F">reported</a> the breach via its social media account on X. 
This isn’t the first time hackers have stolen money from CoinsPaid. Recall how, in July 2023, the company <a href="https://crypto.news/breaking-coinspaid-targeted-in-37-3-million-hack/">suffered</a> a breach that saw $37.3 million get stolen. The company compensated customers from its reserves. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 🚨UPDATE🚨After more investigation, our system has detected more unauthorized transactions on <a href="https://twitter.com/hashtag/BNB?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener">#BNB</a> too involving <a href="https://twitter.com/coinspaid?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@coinspaid</a> Hacker has got another $1M worth of digital assets 924K BSC-USD and 268.5 <a href="https://twitter.com/search?q=%24BNB&amp;src=ctag&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener">$BNB</a>. All together total loss is $7.5M Hacker's address:… <a href="https://t.co/877vBm0Uah" target="_blank">https://t.co/877vBm0Uah</a> <a href="https://t.co/xD6tg9QznK" target="_blank">pic.twitter.com/xD6tg9QznK</a>— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1743639524448587799?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">January 6, 2024</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
 You might also like: <a href="https://crypto.news/north-korean-crypto-hackers-raided-600m-in-2023/"> North Korean crypto hackers raided $600m in 2023 </a> 
It is unknown who is responsible for the Jan. 5 hack, but the Cyvers team suspects it might be the Lazarus group. 
CyVers CEO Deddy Lavid provided an exclusive comment to crypto.news regarding the matter: “On January 5, 2024, at 6:13:23 PM UTC, the Coinspaid exchange suffered a significant security breach, resulting in a total loss of $7.5 million in digital assets on the BNB and ETH chains. Assets stolen included USDT, USDC, CPD on the ETH chain and BNB and BSC-USD on the BNB chain.” 
The hacker allegedly swapped assets into ETH and distributed them across various externally owned accounts (EOAs) on both ETH and BNB chains. 
“Additionally, some of the stolen funds were deposited into WhiteBit, MEXC, and ChangeNow exchanges,” Lavid said. “The root cause of the incident is inadequate wallet access control. Notably, the exchange had previously been alerted to potential vulnerabilities in July 2023 by Cyvers, when the Coinspaid system and Alphapo suffered a $100 million theft linked to the North Korean Lazarus group.” 
Payment platform Alphapo was also a victim of a large-scale <a href="https://crypto.news/alphapo-hacked-over-23-million-in-bitcoin-tron-and-ethereum-stolen/">exploit</a> that led to the loss of $23 million in various crypto assets, including Bitcoin (<a href="https://crypto.news/price/bitcoin/" data-type="link" data-id="https://crypto.news/price/bitcoin/">BTC</a>), Tron (<a href="https://crypto.news/price/tron/" data-type="link" data-id="https://crypto.news/price/tron/">TRX</a>) and Ethereum (<a href="https://crypto.news/price/ethereum/" data-type="link" data-id="https://crypto.news/price/ethereum/">ETH</a>). 
 You might also like: <a href="https://crypto.news/ethereum-suffered-highest-losses-due-to-rug-pulls-and-hacks-data-shows/"> Ethereum suffered highest losses due to rug pulls and hacks, data shows </a> 
<h2 class="wp-block-heading" id="coinspaid-vs-lazarus">CoinsPaid vs. Lazarus</h2> 
In the past, CoinsPaid has <a href="https://coinspaid.com/tpost/0zx28tmj51-coinspaid-is-back-to-processing-after-be" data-type="link" data-id="https://coinspaid.com/tpost/0zx28tmj51-coinspaid-is-back-to-processing-after-be" target="_blank" rel="noopener">suspected</a> that North Korean hackers affiliated with the Lazarus group were responsible for attacking its system. Krupyshev explained that investigations revealed similar patterns and schemes that Lazarus prefers. 
The group has been <a href="https://crypto.news/north-korea-linked-to-latest-crypto-hacks-surpassing-270m/">linked to many hacks</a> over the years. Over the past six years, the entity <a href="https://www.coindesk.com/markets/2023/12/01/north-korean-hackers-lazarus-group-stolen-3b-in-cryptocurrency/" data-type="link" data-id="https://www.coindesk.com/markets/2023/12/01/north-korean-hackers-lazarus-group-stolen-3b-in-cryptocurrency/" target="_blank" rel="noopener">reportedly</a> stole around $3 billion worth of cryptocurrency. In 2023, it stole $600 million in digital assets. 
A month after the hack, CoinsPaid stated in a <a href="https://coinspaid.com/tpost/k4r6jt90p1-the-coinspaid-hack-explained" data-type="link" data-id="https://coinspaid.com/tpost/k4r6jt90p1-the-coinspaid-hack-explained" target="_blank" rel="noopener">blog post</a> that the North Korean hackers socially engineered their way to get access to the company’s internal computers. 
The group had been targeting the firm’s employees for six months with high-paying jobs — some were offered between $16,000 and $24,000 per month. 
In July, one of the CoinsPaid employees was approached by fake HR recruiters and offered an opportunity to take part in an <a href="https://crypto.news/coinspaid-reveals-how-job-offer-led-to-37m-hack/">interview for a new job</a>, the CEO claimed. 
The “interviewer” sent a link to install corporate communications software similar to Zoom. When the employee downloaded the software, it turned out to be a remote PC administration and management tool. 
The employee then realized the job offer was used as a smokescreen that jeopardized CoinsPaid, and reported the hack. 
 Read more: <a href="https://crypto.news/global-crypto-atm-network-shrunk-more-than-5700-in-2023/"> Global crypto ATM network shrunk more than 5,700 in 2023 </a>

CoinsPaid gets hacked again, more than $7m goes missing

Table of Contents

crypto.news

Other articles published on Jan 6, 2024

Dogecoin Whales Are Moving Millions Of Dollars – Here’s Why

Bitcoin ETF: Crypto Community Fires Back As Better Markets Opposes Approval

Mango Markets allocates $250k to tackle US regulatory inquiries

Hashdex unveils new Ad in push for Bitcoin ETF approval

Coinbase Aims to Expand in Europe with Acquisition of MiFID II Licensed Firm

$76 billion asset manager to donate 5% of Bitcoin spot ETF profits to BTC development

Join our free newsletter for daily crypto updates!