2024

Security

Read

Safety

<ul>
 <li>CoinStats halts app after breach impacts 1,590 wallets; connected wallets and CEXes unaffected, investigation ongoing.</li>
 <li>Users received scam notifications leading to a Drainer site; CoinStats advises moving funds immediately from affected wallets.</li>
 <li>Concerns arise over private key storage and wallet generation process; no confirmed impact on shared wallets or API connections.</li>
</ul>
Cryptocurrency portfolio manager <a href="https://x.com/CoinStats" rel="noopener noreferrer nofollow">CoinStats</a> has temporarily suspended user activity after a security breach impacted 1,590 crypto wallets, representing 1.3% of all CoinStats Wallets. The company assured users that connected wallets and centralized exchanges (CEXes) remained unaffected. CoinStats promptly isolated the incident by shutting down the application, as announced in a June 22 post on X.
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Update on the Security Incident The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident.&nbsp; 1. None of the connected wallets and CEXes were impacted. 2. Thanks to the immediate incident reponse from the CoinStats team,…— CoinStats (@CoinStats) <a href="https://twitter.com/CoinStats/status/1804633869372559788?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 22, 2024</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
Details of the Breach
The breach primarily targeted CoinStats-generated wallets. Users reported receiving scam notifications on iOS and Android devices, falsely claiming a 14.2 <a href="https://cryptonewsland.com/controversial-1-28m-ethereum-reward-stirs-crypto-debate/" rel="noopener noreferrer nofollow">ETH reward</a> and directing them to log into the CoinStats AirScout wallet. These notifications led to a Drainer website, promoted via a push notification and in-app message on the app’s home screen. CoinStats is actively investigating this issue and has apologized for the inconvenience caused.
User Instructions and Safety Measures
CoinStats has advised users with affected wallets to move their funds immediately using their exported private keys if available. The company has provided a <a href="https://docs.google.com/spreadsheets/d/1Lwxpy2T6W7aptjBJUio0Z01zihsqknXn6KPhzawQLVI/edit?gid=1914313472#gid=1914313472" rel="noopener noreferrer nofollow">Google document</a> listing the affected wallets, noting that the list might change as the investigation progresses but significant updates are not expected. Users are warned to be cautious of scammers who may exploit the situation by pretending to offer assistance.
Investigation and Potential Vulnerabilities
While CoinStats has not yet disclosed the cause of the attack, there are concerns about whether private keys were stored on their server and the randomness of wallets generated within the app. The ability of attackers to send a malicious push notification suggests they may have gained insights into the wallet generation process, potentially predicting private keys and compromising user funds.
Current Status and User Safety
No wallets or API connections shared with the CoinStats portfolio application appear to have been affected. However, some users have reported that other wallets connected for <a href="https://cryptonewsland.com/coinbase-launches-innovative-smart-wallet-to-simplify-defi-access/" rel="noopener noreferrer nofollow">DeFi features</a> have been drained, although these reports remain unconfirmed by CoinStats. The app remains down as the investigation continues, with CoinStats promising updates as more information becomes available.
Precautionary Advice
CoinStats reminds users to stay vigilant against <a href="https://cryptonewsland.com/binance-assists-btcturk-amid-cyber-attack-and-54m-avax-breach/" rel="noopener noreferrer nofollow">unexpected competitions or rewards</a> in the crypto space and to use hardware wallets for securing critical funds. The company expressed gratitude for users’ patience and emphasized its commitment to restoring the app’s functionality as swiftly as possible.
<h4 class="wp-block-heading" id="h-read-also">Read also</h4>
<ul class="wp-block-yoast-seo-related-links">
 <li><a href="https://cryptonewsland.com/binance-upgrades-wallet-infrastructure-xrp-users-beware/" rel="noopener noreferrer nofollow">Binance Upgrades Wallet Infrastructure, XRP Users Beware</a></li>
 <li><a href="https://cryptonewsland.com/binance-retires-old-deposit-addresses/" rel="noopener noreferrer nofollow">Binance Upgrades Wallet Infrastructure, Retires Old Deposit Addresses</a></li>
 <li><a href="https://cryptonewsland.com/coinbase-temporarily-shutting-down-us-affiliate-marketing-program/" rel="noopener noreferrer nofollow">Coinbase “Temporarily Shutting Down” US Affiliate Marketing Program</a></li>
 <li><a href="https://cryptonewsland.com/transfers-to-temporarily-pause-for-gen-3-0-exchange/" rel="noopener noreferrer nofollow">Transfers to Temporarily Pause For GEN 3.0 Exchange</a></li>
 <li><a href="https://cryptonewsland.com/irs-temporarily-suspends-10000-crypto-reporting-for-businesses/" rel="noopener noreferrer nofollow">IRS Temporarily Suspends $10,000 Crypto Reporting for Businesses</a></li>
</ul>
The post <a href="https://cryptonewsland.com/coinstats-temporarily-shuts-down-app-following-security-breach/" rel="noopener noreferrer nofollow">CoinStats Temporarily Shuts Down App Following Security Breach</a> appeared first on <a href="https://cryptonewsland.com" rel="noopener noreferrer nofollow">Crypto News Land</a>.

CoinStats Temporarily Shuts Down App Following Security Breach

Crypto News Land

Other articles published on Jun 23, 2024

User Loses $11 Million to Crypto Phishing Scam

Market Analyst Predicts Substantial Price Increases for Altcoins, Altseason Approaches

Willy Pepe to Skyrocket 16,000% Before KuCoin Listing, While Shiba Inu and Dogecoin Struggle

Mina Coin Partners with Mirae Asset Financial Group for Enhanced Privacy Solution

MoonBag Presale Rockets into Lunar Orbit as Crypto Expert Forecast 100X Growth in 2024, while Bit...

Get Rich Quick(er): The Cryptos with Fastest Growth Potential

Join our free newsletter for daily crypto updates!