Maker

Aragon

Tornado Cash

Tornado

Wallets linked to the CoinStats exploiter were seen moving almost $1 million in Ether into the cryptocurrency mixing protocol Tornado Cash.
Blockchain security firm CertiK flagged that two wallets linked to the June CoinStats exploit have <a href="https://twitter.com/CertiKAlert/status/1810640205092626544" target="_blank" rel="noopener nofollow">transferred</a> 311 ETH, worth about $959,000, to Tornado Cash. One wallet moved 211 Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>), while the other sent 100 ETH to the crypto mixer. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/eec055b2-888d-4ac4-b4d9-bc9c5519547a.jfif" alt="CoinStats exploiter moves almost $1M to Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Wallet linked to CoinStats exploit transfers 211 ETH to Tornado Cash. Source: Etherscan
 </figcaption>
</figure>
<a href="https://cointelegraph.com/explained/what-is-a-cryptocurrency-mixer-and-how-does-it-work">Crypto mixers</a> keep transactions private by combining potentially identifiable funds with many other funds. This anonymizes fund transfers between services and is often used by hackers to launder their ill-gotten gains. 
<h2 id="coinstats-security-breach-affected-1-590-wallets">CoinStats security breach affected 1,590 wallets</h2>
On June 22, crypto portfolio manager CoinStats suspended user activity following a breach that affected 1,590 crypto wallets. The company announced that it <a href="https://cointelegraph.com/news/cryptocurrency-portfolio-manager-coinstats-security-breach-wallets">had shut down the application</a> to “isolate the security incident.” 
The firm said the attack had been mitigated and noted that “none of the connected wallets and CEXes were impacted.” The company urged affected users to move their funds using their exported private keys. 
On June 30, CoinStats <a href="https://x.com/CoinStats/status/1807433585130918018" target="_blank" rel="noopener nofollow">said</a>&nbsp;it was optimizing its transaction database and transferring to a different platform to improve efficiency and reliability. The company also said it enhancing systems with upgrades and audits. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/6ca2d3fb-58d8-4bf0-afb2-b0f697f693e3.jpg" alt="CoinStats exploiter moves almost $1M to Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/CoinStats/status/1808575021306036288" target="_blank" rel="noopener nofollow">CoinStats</a>
 </figcaption>
</figure>
On July 3, CoinStats announced that functionalities on its platform had recovered and were fully operational. 
Related: <a href="https://cointelegraph.com/news/us-house-bill-crypto-mixers-ban-blockchain-integrity-act">Proposed US Blockchain Integrity Act would ban crypto mixers for 2 years</a>
<h2 data-ct-non-breakable="true" id="coinstats-hack-caused-by-socially-engineered-employee">CoinStats hack caused by “socially engineered” employee</h2>
On June 26, CoinStats CEO Narek Gevorgyan <a href="https://cointelegraph.com/news/coinstats-hack-social-engineering-attack">revealed some details about its investigation</a>. According to Gevorgyan, its infrastructure was hacked, with evidence suggesting that one of its employees was tricked into downloading malicious software onto a work computer. Gevorgyan <a href="https://www.reddit.com/r/CoinStats/comments/1doubje/an_update_from_coinstats_ceo/" target="_blank" rel="noopener nofollow">said</a>:
<blockquote data-ct-non-breakable="true">
 “Our AWS infrastructure was hacked, with strong evidence suggesting it was done through one of our employees who was socially engineered into downloading malicious software onto his work computer.”
</blockquote>
The executive also empathized with those who lost their funds in the attack and highlighted that CoinStats would support the victims and had already discussed their options.&nbsp;
Community members reported millions in losses, with one wallet allegedly losing almost $9 million in MKR (<a href="https://cointelegraph.com/maker-price-index">MKR</a>). 
In a July 5 update, CoinStats highlighted that it is still investigating the incident and is taking action to ensure its new infrastructure is secure. The firm <a href="https://x.com/CoinStats/status/1808957954672005152" target="_blank" rel="noopener nofollow">said</a> it will share additional information soon, including victim support measures. 
Magazine: <a href="https://cointelegraph.com/magazine/raider-investors-daos-nouns-aragon/">‘Raider’ investors are looting DAOs — Nouns and Aragon share lessons learned</a>

CoinStats exploiter moves almost $1M to Tornado Cash

目录

Cointelegraph

发布于 2024年7月10日的其他文章

Terra Classic News: Will LUNC Price Crash to 0?

Avalanche (AVAX) Price Teases Breakout: Momentum Could Drive More Upsides

No Long Squeeze This Bitcoin Cycle, What Does it Mean?

Will Avalanche (AVAX) Rebound to $30 This Week?

The Best Crypto to Buy While Bitcoin Recovers From German Government Sell-off

Bitcoin Exchange Binance Announced That It Will Cancel All Buy-Sell Orders in This Altcoin! Here'...

订阅我们免费的电子期刊，获取每日最新加密领域动态！