CoinStats, a crypto wallet app, temporarily suspended operations due to a security breach that affected 1,590 wallets, or 1.3% of all users.
The company is investigating a fraudulent notification that some iOS and Android users received.
It is currently checking for irregularities. Users received a fake message with 14.2 ETH reward information, which directed them to enter a fake wallet on CoinStats AirScout. This notification was promoted via a “push” notification in the app. CoinStats is conducting an investigation and apologizes to users, promising timely updates.
The firm advises users with affected wallets to move their funds immediately using exported private keys. A link to the list of affected wallets has been provided.
The breach raises concerns about whether private keys are stored on the CoinStats server and about the security of the wallet generation process. Only wallets created by CoinStats were targeted, suggesting the presence of potential vulnerabilities.
CoinStats quickly terminated access to the application and is working to restore its functionality. This event serves as a reminder to users to be cautious of unexpected crypto rewards and to use hardware wallets to secure their funds.
Alex Mashinsky, co-founder and former CEO of the defunct crypto lending platform Celsius, is scheduled to be sentenced on May 8, 2025, following his guilty plea to two federal criminal charges late last year.
A decentralized exchange targeted in a multi-million-dollar exploit has recovered its losses just days after the incident, thanks to an unexpected twist involving the hacker themselves.
A recent cyberattack targeting a UK government official’s social media account has highlighted ongoing concerns over digital impersonation and crypto scams.
A former NFT trader is facing potential prison time after admitting to hiding millions in profits from the IRS through undeclared sales of high-value digital assets.