Cyberattack on CoinsPaid: $ 7.5 million stolen

Brother

Professional
Messages
2,565
Reputation
3
Reaction score
362
Points
83
The losses are compounded, and the excitement among investors is growing.

Cryptocurrency payment gateway CoinsPaid faced the second cyberattack in the last six months. About $ 7.5 million worth of unauthorized transactions were detected, according to Web3 security firm Cyvers.

Artificial intelligence Cyvers recorded a number of suspicious transactions on January 6, during which digital assets worth $ 6.1 million were withdrawn, including Tether (USDT), Ether (ETH), USD Coin (USDC), as well as its own cryptocurrency CoinsPaid - CPD.

6qbmfklo06jkn6qg1inzxmpyxbf6u0gm.png


The Cyvers team reported that the attacker exchanged about 97 million CPD tokens, worth approximately $ 368,000, for ETH and transferred funds to external accounts and cryptocurrency exchanges MEXC, WhiteBit and ChangeNOW. According to CoinGecko, the CPD rate has fallen by 39.5% in the last 24 hours, reaching $0.0006.

In further analysis, Cyvers identified more than $ 1 million worth of unauthorized BNB transactions, which increased the total amount of stolen funds to almost $ 7.5 million.

CoinsPaid, an Estonian cryptocurrency payment processing company, has processed more than 19 billion euros of cryptocurrency transactions to date. The company has not yet responded to this incident.

In July 2023, the platform also suffered a cyberattack that resulted in more than $ 37 billion being stolen. According to CoinsPaid, hackers used a fake job interview to deceive one of the company's employees. The employee allegedly responded to a job offer and downloaded malicious code, which allowed attackers to gain access to the CoinsPaid infrastructure.

In an investigative report, CoinsPaid blamed the North Korean-backed Lazarus group for the incident, noting that the group had tried to infiltrate the platform several times since March 2023, but after failures switched to using "high-tech and active social engineering techniques," targeting employees rather than the company as a whole.

The Lazarus group is believed to be behind a number of cyber attacks on cryptocurrencies in 2023. According to TRM Labs, the group stole at least $ 600 million in cryptocurrency last year.
 
Top