CoinStats, a prominent crypto-tracking platform, has provided further details regarding its June security incident.
The company believes the attack, which resulted in the theft of approximately $2.2 million worth of cryptocurrency from 1,590 CoinStats Wallets, was orchestrated by the notorious Lazarus Group or a similar entity backed by a nation-state.
The breach, detected during unusual transfer activity on June 22, 2024, prompted CoinStats to immediately suspend its operations and collaborate with law enforcement and cybersecurity experts.
The attacker exploited vulnerabilities across various services linked to CoinStats, including external systems, to compromise user-created wallet private keys.
Security researchers such as ZachXBT and Taylor Monahan from MetaMask are actively tracing the stolen funds.
CoinStats has rebuilt its platform entirely to ensure enhanced security, engaging new infrastructure auditors and reinstating full functionality. While no evidence of user data theft was found, the company advises vigilance against potential phishing attempts.
Affected users are urged to transfer assets from wallets created in June and can register until August 15 for future support, though specific details regarding compensation for stolen funds have not been disclosed.
A decentralized exchange targeted in a multi-million-dollar exploit has recovered its losses just days after the incident, thanks to an unexpected twist involving the hacker themselves.
A recent cyberattack targeting a UK government official’s social media account has highlighted ongoing concerns over digital impersonation and crypto scams.
A former NFT trader is facing potential prison time after admitting to hiding millions in profits from the IRS through undeclared sales of high-value digital assets.
Cybersecurity researchers are sounding the alarm after discovering a new and increasingly sophisticated attack targeting the crypto community.