Ethereum

CoinsPaid

Read

<div class="cryptonews"> 
 <p class="is-style-lead">CoinsPaid, an Estonian crypto-payments service provider, fell victim to a cyberattack on Friday, Jan. 5, resulting in the theft of roughly $7.5 million in cryptocurrency on the Binance (BNB) and Ethereum (ETH) chains.</p> 
 <p class="is-style-default">Real-time security alerts from the Cyvers platform reported the breach via its social media account on X. </p> 
 <p class="is-style-default">This isn’t the first time hackers have stolen money from CoinsPaid. Recall how, in July 2023, the company suffered a breach that saw $37.3 million get stolen. The company compensated customers from its reserves.</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">UPDATEAfter more investigation, our system has detected more unauthorized transactions on #BNB too involving @coinspaid <br><br>Hacker has got another $1M worth of digital assets 924K BSC-USD and 268.5 $BNB.<br>All together total loss is $7.5M<br><br>Hacker's address:… https://t.co/877vBm0Uah pic.twitter.com/xD6tg9QznK</p>— Cyvers Alerts (@CyversAlerts) January 6, 2024
   </blockquote> 
  </div>
 </figure> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> North Korean crypto hackers raided $600m in 2023 
 </div> 
 <p>It is unknown who is responsible for the hack, but the Cyvers team suspects it might be the Lazarus group.</p> 
 <p>CyVers CEO Deddy Lavid provided an exclusive comment to crypto.news regarding the matter: “On January 5, 2024, at 6:13:23 PM UTC, the Coinspaid exchange suffered a significant security breach, resulting in a total loss of $7.5 million in digital assets on the BNB and ETH chains. Assets stolen included USDT, USDC, CPD on the ETH chain and BNB and BSC-USD on the BNB chain.”</p> 
 <p>The hacker allegedly swapped assets into ETH and distributed them across various externally owned accounts (EOAs) on both ETH and BNB chains.</p> 
 <p>“Additionally, some of the stolen funds were deposited into WhiteBit, MEXC, and ChangeNow exchanges,” Lavid said. “The root cause of the incident is inadequate wallet access control. Notably, the exchange had previously been alerted to potential vulnerabilities in July 2023 by Cyvers, when the Coinspaid system and Alphapo suffered a $100 million theft linked to the North Korean Lazarus group.”</p> 
 <p>Payment platform Alphapo was also a victim of a large-scale exploit that led to the loss of $23 million in various crypto assets, including Bitcoin (BTC), Tron (TRX) and Ethereum (ETH). </p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Ethereum suffered highest losses due to rug pulls and hacks, data shows 
 </div> 
 <h2 class="wp-block-heading" id="coinspaid-vs-lazarus">CoinsPaid vs. Lazarus</h2> 
 <p>In the past, CoinsPaid has suspected that North Korean hackers affiliated with the Lazarus group were responsible for attacking its system. Krupyshev explained that investigations revealed similar patterns and schemes that Lazarus prefers. </p> 
 <p>The group has been linked to many hacks over the years. Over the past six years, the entity reportedly stole around $3 billion worth of cryptocurrency. In 2023, it stole $600 million in digital assets.</p> 
 <p>A month after the hack, CoinsPaid stated in a blog post that the North Korean hackers socially engineered their way to get access to the company’s internal computers. </p> 
 <p>The group had been targeting the firm’s employees for six months with high-paying jobs — some were offered between $16,000 and $24,000 per month.</p> 
 <p>In July, one of the CoinsPaid employees was approached by fake HR recruiters and offered an opportunity to take part in an interview for a new job, the CEO claimed. </p> 
 <p>The “interviewer” sent a link to install corporate communications software similar to Zoom. When the employee downloaded the software, it turned out to be a remote PC administration and management tool.</p> 
 <p>The employee then realized the job offer was used as a smokescreen that jeopardized CoinsPaid, and reported the hack.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Global crypto ATM network shrunk more than 5,700 in 2023 
 </div> <span class="google-news-banner__label">Follow Us on Google News</span> 
</div> 
<p>Source: <a rel="dofollow" target="_blank" href="https://thebittimes.com/coinspaid-gets-hacked-again-more-than-7m-goes-missing-tbt75793.html">https://thebittimes.com/coinspaid-gets-hacked-again-more-than-7m-goes-missing-tbt75793.html</a></p>

CoinsPaid gets hacked again, more than $7m goes missing

Table of Contents

TheBitTimes

Other articles published on Jan 6, 2024

Satoshi Bitcoin (BTC) Wallet Mystery: $1.19 Million Transaction Landed

Grayscale Adds Ripple’s XRP and Avalanche’s AVAX to Digital Large Cap Fund

Coinbase Aims for EU Derivatives Market Through Forthcoming Acquisition of Cyprus Firm

How Stellar Lumens (XLM) is Poised to Surpass $0.31: A 2024 Crypto Market Analysis

IT Employment Growth Stalls – Merely 700 Positions Gained in 2023, a Drastic Drop from 267,000 in...

ETF Or Halving: Analyst Doubles Down On Bullish Year For Bitcoin

Join our free newsletter for daily crypto updates!