CoinStats, a crypto wallet app, temporarily suspended operations due to a security breach that affected 1,590 wallets, or 1.3% of all users.
The company is investigating a fraudulent notification that some iOS and Android users received.
It is currently checking for irregularities. Users received a fake message with 14.2 ETH reward information, which directed them to enter a fake wallet on CoinStats AirScout. This notification was promoted via a “push” notification in the app. CoinStats is conducting an investigation and apologizes to users, promising timely updates.
The firm advises users with affected wallets to move their funds immediately using exported private keys. A link to the list of affected wallets has been provided.
The breach raises concerns about whether private keys are stored on the CoinStats server and about the security of the wallet generation process. Only wallets created by CoinStats were targeted, suggesting the presence of potential vulnerabilities.
CoinStats quickly terminated access to the application and is working to restore its functionality. This event serves as a reminder to users to be cautious of unexpected crypto rewards and to use hardware wallets to secure their funds.
ALEX Protocol, a DeFi platform built on Bitcoin’s Stacks layer, has suffered a second major breach—this time resulting in an estimated $14 million loss.
A Ukrainian man has been arrested for allegedly orchestrating a years-long cryptojacking scheme that compromised thousands of online accounts tied to a global hosting provider, authorities revealed this week.
An extensive international cybercrime network has been brought down after law enforcement seized 145 domains linked to BidenCash, a notorious online marketplace that thrived on trading stolen credit card data and compromised digital identities.
Hackers in the crypto world are changing course, moving away from exploiting smart contracts and turning their focus toward tricking users directly.