2024

Security

Read

<p class="is-style-lead">CoinStats, a cryptocurrency portfolio management platform, has reported a security breach affecting many user wallets.</p>
<p>On June 22, CoinStats reported a security incident impacting wallets created directly within the app. The company assures users that externally connected wallets and centralized exchanges (CEXs) remain unaffected.&nbsp;</p>
<p>CoinStats urged users with exported private keys to move their funds immediately. See below.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">We are currently experiencing a security incident affecting wallets created directly within CoinStats; this does not impact externally connected wallets.<br><br>If you have your private key exported, move your funds ASAP.</p>— CoinStats (@CoinStats) <a href="https://twitter.com/CoinStats/status/1804604741197893739?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">June 22, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>According to the CoinStats team, only 1,590 of all CoinStats wallets were affected, or 1.3%.</p>
<p>Although the list of affected wallets might change as the investigation continues, significant changes are not expected.&nbsp;</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Update on the Security Incident<br><br>The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident.&nbsp; <br><br>1. None of the connected wallets and CEXes were impacted. <br><br>2. Thanks to the immediate incident reponse from the CoinStats team,…</p>— CoinStats (@CoinStats) <a href="https://twitter.com/CoinStats/status/1804633869372559788?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">June 22, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>CoinStats has suspended user activity and taken the app offline to investigate the incident thoroughly. The company has assured users that the attack has been contained and will continue to provide updates as more information becomes available.</p>
<p>The hack enabled the bad actors to send fraudulent notifications to iOS and Android users, falsely promising rewards and prompting them to access the CoinStats AirScout wallet.&nbsp;</p>
<p>Clicking on the link led users to a drainer website, promoted through a push notification from CoinStats and an official in-app alert on the home screen.</p>
<p>While the company has not disclosed the cause of the attack, the incident has sparked concerns about the security of private keys stored on their server and the randomness of wallets generated within the app.</p>
<p>CoinStats also uploaded a Google <a href="http://docs.google.com/spreadsheets/d%E2%80%A6" target="_blank" rel="noopener noreferrer nofollow">document</a> containing a list of all crypto wallets affected by the attack. Owners whose wallet addresses appear on this list are advised to transfer their funds promptly using exported private keys.</p>
<p>The company is actively investigating the extent of the funds moved and will provide updates as soon as possible. Coinstat expressed gratitude for users’ patience during this period.</p>
<p>The security breach has rattled the cryptocurrency community, leading industry experts to advise victims to be wary of fraudulent rescue efforts.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Update on the Security Incident<br><br>The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident.&nbsp; <br><br>1. None of the connected wallets and CEXes were impacted. <br><br>2. Thanks to the immediate incident reponse from the CoinStats team,…</p>— CoinStats (@CoinStats) <a href="https://twitter.com/CoinStats/status/1804633869372559788?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">June 22, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>You might also like: <a href="https://crypto.news/crypto-sleuth-calls-out-floyd-mayweather-over-another-token-scam/ " rel="noopener noreferrer nofollow"> Crypto sleuth calls out Floyd Mayweather over another token scam </a></p>
<h2 class="wp-block-heading" id="crypto-security-challenges-remain">Crypto security challenges remain&nbsp;&nbsp;</h2>
<p>On June 5, CoinGecko <a href="https://www.coingecko.com/learn/getresponse-data-breach-june-2024%C2%A0" target="_blank" rel="noopener noreferrer nofollow">confirmed</a> that its third-party email management platform, GetResponse, had experienced a data breach.</p>
<p>The hack exposed the personal info for pver 1.9 million CoinGecko users.</p>
<p>A compromised employee account allowed attackers to access users’ names, email addresses, IP addresses, email open locations, and additional metadata such as sign-up dates and subscription plans.</p>
<p>While CoinGecko ensured that user accounts and passwords remained secure, the attackers used the compromised data to send 23,723 phishing emails to affected contacts.&nbsp;</p>
<p>Phishing attacks are commonly used by cybercriminals to steal sensitive information like cryptocurrency wallet private keys or deceive users into sending funds to fraudulent addresses.</p>
<p>The CoinGecko data breach adds to a series of security incidents impacting the cryptocurrency industry.&nbsp;</p>
<p>Another significant threat to investors is the “rug pull” scam, which occurs when developers abandon a cryptocurrency project after raising funds from investors.</p>
<p>Earlier this month, Yang Qichao, a college student in China, was <a href="https://crypto.news/college-student-in-china-sentenced-to-4-years-in-prison-for-300k-rug-pull-in-crypto/" rel="noopener noreferrer nofollow">sentenced</a> to 4.6 years in prison for orchestrating a $300,000 rug pull scam in the cryptocurrency market. Yang created a token named BFF and deceived investors with promises of high returns.&nbsp;</p>
<p>The fraudulent scheme was exposed, leading to Yang being held responsible for his actions and receiving a substantial prison term.</p>
<p>This case underscores the serious consequences of fraudulent activities within the crypto industry.</p>
<p>Read more: <a href="https://crypto.news/ai-is-speeding-up-crypto-website-fraud-and-influencer-scams/&nbsp;" rel="noopener noreferrer nofollow"> AI is speeding up crypto website fraud and influencer scams </a></p>

CoinStats confirms security breach: Affected wallets should ‘move funds immediately’

Table of Contents

crypto.news

Other articles published on Jun 23, 2024

Cyberattack Hits Turkish Exchange BtcTurk: Details

Next-Gen Crypto: 4 Altcoins to Watch

The Next Big Crypto Boom? These 5 Coins Could Explode

Solana Integrates ZK Compression Technology to Improve Scalability

Weekly Market Review: PENDLE, LDO, ENS, TRX, MKR

18 Million Gamers Can’t Be Wrong: Yescoin’s Rise on Telegram

Join our free newsletter for daily crypto updates!