TL;DR
Date of Hack: September 4th, 2023
Entities Involved: Stake.com, potential North Korea-affiliated hackers.
Amount Lost: $41M
Key Vulnerability: Suspected compromise of Stake’s hot wallet private keys.
On September 4th, the online crypto casino Stake.com faced a substantial security breach, resulting in a staggering loss of around $41M from its hot wallets. This incident, while unfortunate, provides valuable insights into the intricacies of blockchain security and the ever-evolving tactics of crypto hackers.
This hack’s swift and strategic nature suggests a potential compromise of Stake’s hot wallet private keys. However, as of this writing, there hasn’t been an official confirmation from Stake.com’s team regarding this.
Ethereum Network Breach
Within moments, a massive $15.7M was siphoned off from the Ethereum Network. The crypto assets targeted included:
These were quickly funneled to hacker-controlled address 0x3130662aece32f05753d00a7b95c0444150bcd3c
, which subsequently distributed them to various Externally Owned Accounts (EOAs).
Binance Smart Chain & Polygon Networks Breach
Roughly an hour later, the attacker struck again, this time targeting both the Binance Smart Chain and the Polygon Networks. A total of $25.2M in assets were drained:
From BSC:
And others including 1.8M USDC, 2100 $ETH, 1.3M $BUSD, 83.9B $SHIB, 40K $LINK, and 300K $MATIC. All the assets were immediately sent to this address 0x4464e91002c63a623a8a218bd5dd1f041b61ec04
and distributed to different EOAs.
From Polygon:
The assets were sent to this address 0xfe3f568d58919b14aff72bd3f14e6f55bec6c4e0
and distributed between multiple accounts.
Shockingly, it took five hours after the initial attack for the Stake.com team to acknowledge the breach publicly, assuring users that their funds remained secure. Interestingly, a mere few hours prior, users were notified of a system maintenance.
Two days after the attack, the attacker commenced laundering the stolen assets, predominantly by bridging them from Polygon to Avalanche, eventually converting a substantial portion of MATIC to BTC. To date, 72 BTC have been laundered, with the remaining assets still seemingly in the attacker’s possession.
Recent information from the FBI points towards a more sinister plot. The attack signatures and the addresses involved seem eerily similar to those seen in other significant 2023 hacks, including those of Alphapo, CoinsPaid, and Atomic Wallet. These hacks collectively resulted in losses surpassing $200M. Preliminary investigations suggest that North Korean hackers might be the culprits behind this series of high-profile breaches.
Follow @hackenclub on ? (Twitter)
The Stake.com hack serves as a stark reminder of the evolving threats in the crypto domain. Continuous vigilance, robust security measures, and proactive incident response mechanisms are paramount in ensuring the safety of digital assets.
Be the first to receive our latest company updates, Web3 security insights, and exclusive content curated for the blockchain enthusiasts.
Tell us about your project
6 min read
Discover
10 min read
Discover
4 min read
Discover