Maker

Aragon

Tornado Cash

Tornado

Wallets linked to the CoinStats exploiter were seen moving almost $1 million in Ether into the cryptocurrency mixing protocol Tornado Cash.
Blockchain security firm CertiK flagged that two wallets linked to the June CoinStats exploit have <a href="https://twitter.com/CertiKAlert/status/1810640205092626544" target="_blank" rel="noopener nofollow">transferred</a> 311 ETH, worth about $959,000, to Tornado Cash. One wallet moved 211 Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>), while the other sent 100 ETH to the crypto mixer. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/eec055b2-888d-4ac4-b4d9-bc9c5519547a.jfif" alt="CoinStats exploiter moves almost $1M to Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Wallet linked to CoinStats exploit transfers 211 ETH to Tornado Cash. Source: Etherscan
 </figcaption>
</figure>
<a href="https://cointelegraph.com/explained/what-is-a-cryptocurrency-mixer-and-how-does-it-work">Crypto mixers</a> keep transactions private by combining potentially identifiable funds with many other funds. This anonymizes fund transfers between services and is often used by hackers to launder their ill-gotten gains. 
<h2 id="coinstats-security-breach-affected-1-590-wallets">CoinStats security breach affected 1,590 wallets</h2>
On June 22, crypto portfolio manager CoinStats suspended user activity following a breach that affected 1,590 crypto wallets. The company announced that it <a href="https://cointelegraph.com/news/cryptocurrency-portfolio-manager-coinstats-security-breach-wallets">had shut down the application</a> to “isolate the security incident.” 
The firm said the attack had been mitigated and noted that “none of the connected wallets and CEXes were impacted.” The company urged affected users to move their funds using their exported private keys. 
On June 30, CoinStats <a href="https://x.com/CoinStats/status/1807433585130918018" target="_blank" rel="noopener nofollow">said</a>&nbsp;it was optimizing its transaction database and transferring to a different platform to improve efficiency and reliability. The company also said it enhancing systems with upgrades and audits. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/6ca2d3fb-58d8-4bf0-afb2-b0f697f693e3.jpg" alt="CoinStats exploiter moves almost $1M to Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/CoinStats/status/1808575021306036288" target="_blank" rel="noopener nofollow">CoinStats</a>
 </figcaption>
</figure>
On July 3, CoinStats announced that functionalities on its platform had recovered and were fully operational. 
Related: <a href="https://cointelegraph.com/news/us-house-bill-crypto-mixers-ban-blockchain-integrity-act">Proposed US Blockchain Integrity Act would ban crypto mixers for 2 years</a>
<h2 data-ct-non-breakable="true" id="coinstats-hack-caused-by-socially-engineered-employee">CoinStats hack caused by “socially engineered” employee</h2>
On June 26, CoinStats CEO Narek Gevorgyan <a href="https://cointelegraph.com/news/coinstats-hack-social-engineering-attack">revealed some details about its investigation</a>. According to Gevorgyan, its infrastructure was hacked, with evidence suggesting that one of its employees was tricked into downloading malicious software onto a work computer. Gevorgyan <a href="https://www.reddit.com/r/CoinStats/comments/1doubje/an_update_from_coinstats_ceo/" target="_blank" rel="noopener nofollow">said</a>:
<blockquote data-ct-non-breakable="true">
 “Our AWS infrastructure was hacked, with strong evidence suggesting it was done through one of our employees who was socially engineered into downloading malicious software onto his work computer.”
</blockquote>
The executive also empathized with those who lost their funds in the attack and highlighted that CoinStats would support the victims and had already discussed their options.&nbsp;
Community members reported millions in losses, with one wallet allegedly losing almost $9 million in MKR (<a href="https://cointelegraph.com/maker-price-index">MKR</a>). 
In a July 5 update, CoinStats highlighted that it is still investigating the incident and is taking action to ensure its new infrastructure is secure. The firm <a href="https://x.com/CoinStats/status/1808957954672005152" target="_blank" rel="noopener nofollow">said</a> it will share additional information soon, including victim support measures. 
Magazine: <a href="https://cointelegraph.com/magazine/raider-investors-daos-nouns-aragon/">‘Raider’ investors are looting DAOs — Nouns and Aragon share lessons learned</a>

CoinStats exploiter moves almost $1M to Tornado Cash

Tabla de contenidos

Cointelegraph

Otros artículos publicados el 10 jul 2024

SBI Digital Markets taps former Bank of Korea official for South Korea expansion

Shiba Inu vs MPEPE: Shiba Inu Traders Compare ROI Potential For New Cryptocurrency Against SHIB

Ethereum Maintains $3K Position, Fuels Hope with Possible ETF Turnaround

BONK Token Surges 44%: Can Meme Coins Defy Gravity with Proposed Burn?

Inside Yellen’s Congressional Testimony on Crypto’s Future

WhiteBIT CUP 2024: Where Crypto and Business Icons Converge on the Legendary FC Barcelona Field

¡Únete a nuestro boletín gratuito para recibir actualizaciones diarias de criptografía!