Crypto exchange CoinSpot reportedly suffers $2M hot wallet hack
Australian crypto exchange CoinSpot has reportedly been hacked for $2.4 million in a “probable private key compromise” over at least one of its hot wallets.
According to a Nov. 8 post to his Telegram channel , blockchain sleuth ZachXBT highlighted two transactions entering the alleged hackers wallet. Afterwards, the wallet’s owner bridged the funds to the Bitcoin ( BTC ) network via ThorChain and Wan Bridge.
In emailed comments to Cointelegraph, blockchain security firm CertiK said the alleged exploit was the result of a “probable private key compromise” on at least one CoinSpot hot wallet.
According to data from Etherscan, a transaction totalling 1,262 Ether ( ETH ) — worth $2.4 million at current prices — came from a known CoinSpot wallet and entered the alleged hackers wallet.
The presumed attacker stole 1,262 ETH from a known CoinSpot wallet. Source: ZachXBTThe owner of the wallet address that received the 1,262 ETH then began making a series of transfers. In two separate transactions, the wallet’s owner swapped 450 ETH for 24 Wrapped Bitcoin (WBTC) via Uniswap.
The list of transactions made from the alleged attackers' wallet. Source: DeBankRelated: Apple MacOS malware targets crypto community and engineers
Within the next 10 minutes, the address swapped 831 ETH for Bitcoin via Thorchain, sending the Bitcoin to four different wallet addresses, according to CertiK investigative data viewed by Cointelegraph.
A search of Bitcoin explorer BTCScan data , showed the owner of the four Bitcoin wallets distributing the allegedly ill-gained BTC to multiple new wallets, transferring smaller divisions of the funds to additional new wallets each time.
This is a tactic commonly leveraged by attackers to prolong the investigation process — making it more difficult to track the entirety of the stolen funds.
CoinSpot was established in 2013 and currently stands as Australia’s largest crypto exchange by reported user numbers, serving around 2.5 million customers. The exchange is regulated by Australian financial watchdog AUSTRAC and was granted an Australian Digital Currency Exchange License by the regulator.
CoinSpot did immediately respond to a request for comment from Cointelegraph.
Magazine: Beyond crypto — Zero-knowledge proofs show potential from voting to finance
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Avalanche launches Avalanche9000 testnet, its largest upgrade to date
Ether gains momentum as capital shifts from bitcoin and derivatives activity increases
Capital flows are shifting from bitcoin to ether, with derivatives market activity signaling growing confidence in ether’s near-term upside, analysts said.Ether has surged over 6% while in the past 24 hours, while bitcoin saw a slight decline, as open interest and demand for call options hit record highs for the second-largest cryptocurrency by market cap.
WisdomTree registers XRP ETF entity in Delaware: report
WisdomTree, an issuer of exchange-traded funds, registered an XRP ETF entity in Delaware.The move signals that the fund manager will likely file an S-1 registration with the SEC.