Maker

Aragon

Tornado Cash

Tornado

Wallets linked to the CoinStats exploiter were seen moving almost $1 million in Ether into the cryptocurrency mixing protocol Tornado Cash.
Blockchain security firm CertiK flagged that two wallets linked to the June CoinStats exploit have <a href="https://twitter.com/CertiKAlert/status/1810640205092626544" target="_blank" rel="noopener nofollow">transferred</a> 311 ETH, worth about $959,000, to Tornado Cash. One wallet moved 211 Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>), while the other sent 100 ETH to the crypto mixer. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/eec055b2-888d-4ac4-b4d9-bc9c5519547a.jfif" alt="CoinStats exploiter moves almost $1M to Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Wallet linked to CoinStats exploit transfers 211 ETH to Tornado Cash. Source: Etherscan
 </figcaption>
</figure>
<a href="https://cointelegraph.com/explained/what-is-a-cryptocurrency-mixer-and-how-does-it-work">Crypto mixers</a> keep transactions private by combining potentially identifiable funds with many other funds. This anonymizes fund transfers between services and is often used by hackers to launder their ill-gotten gains. 
<h2 id="coinstats-security-breach-affected-1-590-wallets">CoinStats security breach affected 1,590 wallets</h2>
On June 22, crypto portfolio manager CoinStats suspended user activity following a breach that affected 1,590 crypto wallets. The company announced that it <a href="https://cointelegraph.com/news/cryptocurrency-portfolio-manager-coinstats-security-breach-wallets">had shut down the application</a> to “isolate the security incident.” 
The firm said the attack had been mitigated and noted that “none of the connected wallets and CEXes were impacted.” The company urged affected users to move their funds using their exported private keys. 
On June 30, CoinStats <a href="https://x.com/CoinStats/status/1807433585130918018" target="_blank" rel="noopener nofollow">said</a>&nbsp;it was optimizing its transaction database and transferring to a different platform to improve efficiency and reliability. The company also said it enhancing systems with upgrades and audits. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/6ca2d3fb-58d8-4bf0-afb2-b0f697f693e3.jpg" alt="CoinStats exploiter moves almost $1M to Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/CoinStats/status/1808575021306036288" target="_blank" rel="noopener nofollow">CoinStats</a>
 </figcaption>
</figure>
On July 3, CoinStats announced that functionalities on its platform had recovered and were fully operational. 
Related: <a href="https://cointelegraph.com/news/us-house-bill-crypto-mixers-ban-blockchain-integrity-act">Proposed US Blockchain Integrity Act would ban crypto mixers for 2 years</a>
<h2 data-ct-non-breakable="true" id="coinstats-hack-caused-by-socially-engineered-employee">CoinStats hack caused by “socially engineered” employee</h2>
On June 26, CoinStats CEO Narek Gevorgyan <a href="https://cointelegraph.com/news/coinstats-hack-social-engineering-attack">revealed some details about its investigation</a>. According to Gevorgyan, its infrastructure was hacked, with evidence suggesting that one of its employees was tricked into downloading malicious software onto a work computer. Gevorgyan <a href="https://www.reddit.com/r/CoinStats/comments/1doubje/an_update_from_coinstats_ceo/" target="_blank" rel="noopener nofollow">said</a>:
<blockquote data-ct-non-breakable="true">
 “Our AWS infrastructure was hacked, with strong evidence suggesting it was done through one of our employees who was socially engineered into downloading malicious software onto his work computer.”
</blockquote>
The executive also empathized with those who lost their funds in the attack and highlighted that CoinStats would support the victims and had already discussed their options.&nbsp;
Community members reported millions in losses, with one wallet allegedly losing almost $9 million in MKR (<a href="https://cointelegraph.com/maker-price-index">MKR</a>). 
In a July 5 update, CoinStats highlighted that it is still investigating the incident and is taking action to ensure its new infrastructure is secure. The firm <a href="https://x.com/CoinStats/status/1808957954672005152" target="_blank" rel="noopener nofollow">said</a> it will share additional information soon, including victim support measures. 
Magazine: <a href="https://cointelegraph.com/magazine/raider-investors-daos-nouns-aragon/">‘Raider’ investors are looting DAOs — Nouns and Aragon share lessons learned</a>

CoinStats exploiter moves almost $1M to Tornado Cash

Table of Contents

Cointelegraph

Other articles published on Jul 10, 2024

Notcoin(NOT) Price Prediction: Is This the Beginning of a Bullish Market?

Whale Withdraws 16,449 ETH Ahead of Ethereum ETF Approval

Is the Bull Market Over in Bitcoin? Billionaire Investor Cathie Wood Announced!

VeChain’s 2024 Struggle: Can Strategic Partnerships Outweigh Bearish Trends?

Microsoft Declines Board Seats at OpenAI Amid Regulatory Scrutiny

Bitcoin Price Drops to $53,500

Join our free newsletter for daily crypto updates!