Radar

Bitcoin

Security

Coin

<a href="https://cryptonews.com/cryptocurrency/how-to-buy-bitcoin/">Bitcoin</a> ATM maker Lamassu Industries has successfully addressed a vulnerability that could have granted hackers “full control” over its <a href="https://cryptonews.com/exclusives/how-to-launch-a-bitcoin-atm-business-4421.htm">Bitcoin ATM machines</a>. 
The flaw came to light when a team of ethical hackers from security firm IOActive attempted to compromise Lamassu’s Bitcoin ATMs in 2023. 
During the process, which the team has <a href="https://labs.ioactive.com/2024/01/atm-security-owning-bitcoin-atm.html">documented</a> online, the researchers identified and exploited several vulnerabilities that allowed them to gain full control over the ATMs. 
See how IOActive’s researchers took advantage of the vulnerability in the video below: 
In <a href="https://cointelegraph.com/news/bitcoin-atm-vulnerability-ethical-hackers">comments</a> shared with Cointelegraph, Gunter Ollman, CTO of IOActive, explained that through the exploit, attackers could “view and manipulate interactions with the hijacked ATM.” 
This meant that hackers had the potential opportunity to steal Bitcoin from users’ wallets by taking advantage of the identified vulnerabilities. 
According to Ollman, a sophisticated attacker could modify the entire user experience, tricking users into performing actions such as entering bank account details. 
Ollman assured the community that the attack’s impact would be limited to a user’s account balance, but the potential for social engineering was significant. 
<h2 id="bitcoin-atm-vulnerability-gave-hackers-full-control">Bitcoin ATM Vulnerability Gave Hackers ‘Full Control’</h2> 
 Gabriel Gonzalez, Director of Hardware Security at IOActive, commented that the vulnerability could grant an attacker “full control” over a physical ATM machine. 
This included the ability to drain all the money in the ATM and manipulate the note reader to display inaccurate deposit amounts, he said. 
The security researchers noted the severity of the vulnerabilities, especially if the ATMs were left unattended in various locations. 
Lamassu Industries responded promptly to the findings, deploying a security patch to fix the vulnerabilities before they were publicly disclosed in 2024, and told owners of their Bitcoin ATMs to update their software. 
<h2 id="number-of-bitcoin-atms-in-decline">Number of Bitcoin ATMs in decline</h2> 
 As reported earlier this month, the <a href="https://cryptonews.com/news/bitcoin-atms-see-first-decline-in-a-decade-with-11-drop.htm">number of installed&nbsp;Bitcoin&nbsp;ATMs worldwide fell in 2023</a> after having risen every year for more than a decade. 
According to data from Coin ATM Radar, the fall was attributed to a notably lower number of machines in the US from 2022 to 2023, while several other regions of the world saw an <a href="https://cryptonews.com/exclusives/bitcoin-atms-are-increasing-fees-don-t-change-2505.htm">increasing number of machines</a>. Source: Coin ATM Radar 
The US accounts for 82% of all installed Bitcoin ATMs globally, with 27,621 installed machines as of the end of last year, per Coin ATM Radar’s data.

Bitcoin ATM Vulnerability Fixed: Hackers Could Have Gained ‘Full Control’

Table of Contents

Cryptonews.com

Other articles published on Jan 25, 2024

Crypto Wallets Drained Off $600K Due To Ignored Phishing Attack

How this crypto trader turned $3k to $650k in 19 hours

BONK: As traders remain bearish, what’s next for the memecoin?

Crypto: The Court releases truckers’ assets in Canada

Bitcoin Market in Confusion as BTC Rebounds to $40k, Expert Suggests the Best Trading Approach

Crypto: Solana offers token extensions. A major revolution!

Join our free newsletter for daily crypto updates!