💥 CoinsPaid Hacked Again: $7.5 Million Lost! 😱

CoinsPaid has experienced its second security breach in the past six months, resulting in unauthorized transactions amounting to nearly $7.5 million.

CoinsPaid experiences another security breach, with unauthorized transactions amounting to $7.5 million detected. This is the second breach in six months.

CoinsPaid Hack Source: AdobeStock / Sergey Nivens

CoinsPaid, the Estonian payment processor for digital assets, has fallen victim to yet another security breach, with a staggering $7.5 million in unauthorized transactions. This is the second major hack the company has experienced in the past six months, raising serious concerns about its security measures. Let’s dive into the details and explore the implications of this incident.

Irregular Transactions Uncovered 👀

Cyvers, a renowned web3 security firm, has reported the breach. According to their artificial intelligence system, several irregular transactions were discovered on January 6th at 1:26 pm GMT, resulting in the withdrawal of $6.1 million worth of digital assets. The attacker targeted various tokens, including Tether (USDT), Ether (ETH), USD Coin (USDC), and CoinsPaid’s native token CPD.

The audacious hacker managed to swap around 97 million CPD tokens, valued at approximately $368,000, for ETH. They then transferred the funds to externally owned accounts (EOAs) and prominent crypto exchanges like MEXC, WhiteBit, and ChangeNOW. The breach escalated further when unauthorized transactions of Binance Coin (BNB) worth over $1 million were uncovered, bringing the total stolen amount close to $7.5 million.

🔒 CoinsPaid’s Security Struggles 🤦‍♂️

Unfortunately, this is not the first time CoinsPaid has faced such a security debacle. In July 2023, the company fell victim to a hack that resulted in the theft of over $37.3 million. Interestingly, the recent breach followed a similar modus operandi. The attackers tricked one of CoinsPaid’s employees through a fake job interview, leading to the download of malicious code and eventual unauthorized access to the company’s infrastructure.

During the previous incident, hackers utilized sophisticated social engineering techniques, posing as potential employers to target individual workers. By exploiting a vulnerability within the platform’s cluster, they gained unwarranted access, opening a backdoor that allowed them to mimic legitimate blockchain interactions and withdraw funds from CoinsPaid’s operational storage vault.

🌐 Lazarus Group and Persistent Threats 🌐

CoinsPaid suspected the involvement of the notorious Lazarus Group, a North Korean hacking organization, in the July hack. The same suspicions arise regarding this recent breach. The tactics employed in both incidents bear a striking resemblance to those attributed to the Lazarus Group.

Following the hack, CoinsPaid promptly filed a report with Estonian law enforcement to facilitate a comprehensive investigation. Blockchain security firms including Chainalysis, Match Systems, and Crystal also lent their expertise to assist in the preliminary investigation.

👀 The Growing Cryptocurrency Holdings of the Lazarus Group 💰

With CoinsPaid facing the daunting challenge of securing its platform after two major breaches, it’s worth highlighting the impressive cryptocurrency holdings of the Lazarus Group. This North Korean hacking organization has allegedly amassed holdings exceeding $47 million in various cryptocurrencies, primarily Bitcoin (BTC).

A report from institutional crypto platform provider 21.co in October 2023 uncovered wallets linked to the Lazarus Group containing around 1,600 Bitcoin, 10,810 Ether (ETH), and 64,490 Binance Coin (BNB). These holdings were estimated to be worth a jaw-dropping $75 million at the time of the report.

💡 Conclusion: The Battle for Blockchain Security Continues 💡

CoinsPaid’s latest security breach serves as a stark reminder of the persistent threats lurking in the crypto world. As the industry evolves, payment gateways and other platforms must enhance their security measures to protect users’ assets from sophisticated hackers. It is critical for companies like CoinsPaid to employ advanced technologies, conduct regular security audits, and educate their employees to prevent future breaches.

With the Lazarus Group’s growing cryptocurrency holdings and their continued involvement in high-profile hacks, the crypto community must remain vigilant. Collaboration with blockchain security firms, strict regulatory oversight, and continued research and development of robust security protocols will be essential to safeguarding the future of digital assets.


💬 Q&A: Your Burning Questions Answered

🔒 Is My Money Safe on CoinsPaid?

While CoinsPaid has experienced multiple security breaches in the past, it’s important to remember that no system is entirely foolproof. However, CoinsPaid should take these incidents as a wake-up call to fortify their security measures. As a user, it’s advisable to exercise caution and consider diversifying your holdings across multiple platforms with strong security track records.

🌐 What Can Cryptocurrency Companies Learn from CoinsPaid’s Experience?

The key lesson here is the need for robust security protocols. Cryptocurrency companies should implement multi-factor authentication, frequent security audits, and regular employee training to identify and mitigate potential risks. Collaborating with reputable blockchain security firms can also provide valuable insights and assistance in strengthening security measures.

💰 Are There Any Investment Opportunities in the Blockchain Security Sector?

Given the increasing frequency and sophistication of cyber attacks targeting the cryptocurrency industry, there is undoubtedly a growing demand for blockchain security solutions. Investing in reputable blockchain security firms that actively contribute to bolstering the industry’s defenses could be a promising long-term investment strategy.

🔒 What Steps Should I Take to Protect My Cryptocurrency Holdings?

Alongside choosing secure platforms, it’s crucial to secure your own digital assets. Utilize hardware wallets or cold storage solutions to store your cryptocurrencies offline. Furthermore, enable two-factor authentication (2FA) wherever possible and be cautious of phishing attempts or suspicious links.


🔥 In Conclusion: Stay Informed, Stay Safe! 🔒

CoinsPaid’s latest security breach is a stark reminder of the evolving threats faced by the cryptocurrency industry. As technology advances, so must our defense mechanisms. By remaining vigilant, promoting stronger security practices, and investing in innovative blockchain security solutions, we can safeguard the future of digital assets. Spread the word, stay informed, and let’s build a safer crypto ecosystem together!

🌐 References: 1. Cyvers’ AI System 2. CoinsPaid’s Suspicions of the Lazarus Group 3. Lazarus Group’s Cryptocurrency Holdings 4. 21.co’s Report on Lazarus Group’s Holdings

We will continue to update Blocking; if you have any questions or suggestions, please contact us!

Share:

Was this article helpful?

93 out of 132 found this helpful

Discover more

Blockchain

Fidelity Digital Assets Chooses EY Blockchain Analyzer: Reconciler to Boost Trust and Crush Risk!

EY Global's latest announcement reveals Fidelity Digital Assets as the first big user of their fourth generation EY B...

Blockchain

Polygon Steps Up its Game with the POL Token Upgrade

Exciting news for fashion lovers - Polygon has officially launched the upgraded POL token on Ethereum Mainnet, markin...

Market

LayerZero’s Native Token Launch Sparks Excitement in the Crypto Community

Fashionista, get ready! LayerZero, a blockchain interoperability protocol, has announced that it will be launching it...

Blockchain

Solana Mobile’s Chapter 2 Web3 Phone Surpasses Expectations with Impressive Pre-Orders

Solana Mobile's Chapter 2 has exceeded all expectations by receiving an incredible 25,000 pre-orders within just 24 h...

Market

Get Ready for a $1T Crypto Market Cap Surge with the Approval of Bitcoin ETFs

Fashion bloggers take note CryptoQuant, a popular blockchain data company, has released insights on what to expect on...

Market

OKX Teams Up with Komainu and CoinShares: Adding a Traditional Touch to Institutional Asset Trading

Fashionista to read OKX collaborates with Komainu and CoinShares to drive institutional use of digital assets.