While the platform has not released an official statement on the matter, on-chain analysts have broken down the incident, revealing Ethereum, Polygon, and Binance Smart Chain networks were involved. Despite assurances that Bitcoin (BTC), Litecoin (LTC), and Ripple (XRP) wallets are unaffected, the cause of the exploit or how much was stolen remains unknown. Blockchain security firm Peckshield noticed the unusual transactions and told Decrypt that the transfers looked suspicious, and went on to ask if the platform was under maintenance. This was done within 20 minutes, with malicious components disabled and necessary containment measures put in place within 4 hours. As a result, the attack impacted only a small portion of Stake.com’s reserve funds meant for large winnings. Stake.com also quickly resumed its operations and began crediting customers who sent funds during the exploit.
These measures are designed to make it difficult for unauthorised individuals to access user accounts. As cold wallets store assets offline, with access via hardware devices, the threat of being hacked is significantly lower. Use of cold wallets has increased, especially after the collapse of FTX, black trans porn - shemale porn videos and hacks on several other centralised crypto exchanges.
Kane Pepi is a financial, gambling and cryptocurrency writer with over 2,000 published works, including on platforms like InsideBitcoins and Motley Fool. The Stake.com hack serves as a stark reminder of the evolving threats in the crypto domain. Continuous vigilance, robust security measures, and proactive incident response mechanisms are paramount in ensuring the safety of digital assets. Now since bitcoin transactions are anonymous and irreversible, the bitcoin gambling site faces a tough challenge in tracking down "Hufflepuff" and forcing him or her to return the funds. The company is currently focusing its operations in Russia and China after pulling out of the U.S. and Australian markets due to regulation. According to the company’s CEO, they are offering rewards to anyone with information that can help them recover the lost money.
The Stake.com hack, and the post theft movement of funds, is another example of North Korea’s evolved obfuscation techniques in a multi and cross-chain ecosystem. This week the FBI issued a release confirming that the theft of approximately $41 million in crypto assets from Stake.com, an online casino and betting platform, xxx videos porn sites was the work of North Korea’s Lazarus Group. "Three hours ago, unauthorised [transactions] were made from Stake’s ETH/BSC hot wallets. We are investigating and will get the wallets up as soon as they’re completely re-secured," the company tweeted. Stake cryptocurrency casino had suspended all deposits and withdrawals, after the betting platform suffered an exploit, with the bad actor making away with millions of Dollars’ worth of crypto. On September 7, the platform disclosed that the hacker had begun cross-chain transactions by transferring funds to the BTC blockchain through new wallets on Polygon and Avalanche.
👿On Jan 11, 2024, a victim on the Ethereum chain was scammed for over ~$772K worth of stETH when it signed a malicious ERC20 Permit signature. The attacker repeatedly called the withdraw function with a unit amount to cause a mismatch between the protocol token balance and shares. The attack was an arbitrary low-level call exploit that happened due to a bug in the contract’s approval process. The addresses created to transfer these tokens are the temp addresses pre-computed by CREATE2. This phishing exploit method is not new and is based on a malicious Blur bulk listing signature used by scammers to steal NFTs with just one message signature. 😈On Jan 25, 2024, a victim on Ethereum lost ~$164k worth of PudgyPenguins NFTs to a phishing attack.
The address which created 3 upgraded ConeCamelotVault contracts is0x5A58D1a81c73Dc5f1d56bA41e413Ee5288c65d7F. As the vaults were upgradable, the attacker updated the implementation contract of the CONE-1 proxy contract from the original ConeCamelotVault contract to the attacker-controlled contract. The hack’s cause was the victim’s signing of a malicious Blur Bulk signature. The hack is currently being investigated thoroughly, and the report will be published soon.
He also added that there were no signs of attackers accessing personal information. Craven said the company reacted fast and is cooperating with authorities, including the FBI. However, that depends on one’s definition of "rare." According to blockchain security company Beosin, there were 108 cyberattacks on crypto companies in the first half of 2023, resulting in over $400 million in losses. The operator added that the funds were stolen from company hot wallets, not users’ funds. Hot wallets are always connected to the cryptocurrency network and the internet.
In Dec 2022, @LastPass informed its users about unauthorized access to its third-party cloud-based storage service, which was being used by LastPass to store archived backups of production data. 😈On Feb 22, 2024, two wallets on Ronin Network belonging to Jeff Zirlin @Jihoz_Axie, co-founder of @Ronin_Network, were compromised in what appears to be a private key compromise. In July 2023, the same white-hat hacker saved Curve protocol @CurveFinance from a ~$5.5M exploit (2800 ETH) by front-running the exploit transaction. The IDO was being promoted for over a week, and users were continuously lured by posting info about partnerships with different crypto exchanges and using scarcity marketing tactics. Team Seneca has offered a 20% bounty to the exploiter in return for stolen funds. The native SHIDO token is an Ethereum-based ERC-20 token, which users have staked on the project’s DEX, [Redirect-302] which is offering an annual yield of 8% as per the info available on its website.
Earlier today, crypto security firm Cyvers flagged multiple irregular transactions linked to Stake.com’s hot wallet. Lazarus group had already been a prime suspect for this latest loss of crypto. Earlier in the summer Github warned of North Korean hackers conducting low-level social engineering campaigns against employees of crypto, blockchain and gambling-related companies. North Korea-linked hacker collective Lazarus Group was behind this month’s hack of crypto casino and betting platform Stake, according to the Federal Bureau of Investigation. Monday’s hack saw the attackers target hot wallets used by Stake in its daily operations.
DeFi venture investor and security researcher Arhat Bhagwatka told DL News that compromised private keys was the "most plausible explanation" for the unauthorised withdrawals from Stake’s hot wallet. Update 9/8 - The FBI has confirmed that Lazarus is responsible for the attack on Stake.com, and posted the wallet addresses the North Korean hackers used in the heist. The platform immediately reassured users that their funds were safe, and all other wallets not directly impacted by the attack, including those holding BTC, LTC, XRP, EOS, and TRX, remained fully operational.