In a recent security breach, Australian crypto exchange CoinSpot has reportedly fallen victim to a hack resulting in a loss of $2.4 million. Blockchain security firm CertiK suggests that the compromise of a private key on at least one of CoinSpot’s hot wallets is the likely cause of the incident.
ZachXBT, a blockchain investigator, brought attention to the breach through a Telegram post in November revealing two transactions leading to the alleged hacker’s wallet. CertiK later confirmed a “probable private key compromise” on a CoinSpot hot wallet. The exploited hot wallet, containing 1,262 Ether valued at $2.4 million, saw funds transferred to the hacker’s wallet.
Following the initial transfer, the wallet’s owner utilized ThorChain and Wan Bridge to move the funds into the Bitcoin network. CertiK’s investigative data displayed subsequent transactions, including the exchange of 450 ETH for 24 Wrapped Bitcoin (WBTC) via Uniswap. Within a brief 10-minute window, the wallet address swapped 831 ETH for Bitcoin via Thorchain, distributing the acquired Bitcoin to four different wallet addresses.
The Bitcoin explorer BTCScan revealed that the owner of the four Bitcoin wallets engaged in a strategy often employed by attackers to complicate investigations. The allegedly ill-gotten BTC was systematically distributed to multiple new wallets, with smaller portions transferred each time. This tactic aims to hinder the tracking of stolen funds and prolong the investigation process.
CoinSpot enhancing security posture after breach
Established in 2013, CoinSpot is Australia’s largest crypto exchange, boasting around 2.5 million users. The exchange is regulated by the Australian financial watchdog AUSTRAC and holds an Australian Digital Currency Exchange License. Despite the security incident, CoinSpot remains a significant player in the Australian crypto landscape, emphasizing the need for heightened security measures across the industry.
CoinSpot has initiated a comprehensive investigation into the security breach, working closely with relevant authorities and cybersecurity experts to determine the extent of the compromise. The exchange assures users that all necessary steps are being taken to secure the platform and prevent any further unauthorized access. CoinSpot urges affected users to remain vigilant and report any suspicious activity promptly.
The breach at CoinSpot raises concerns about the overall security posture of cryptocurrency exchanges. With the increasing value and popularity of digital assets, these platforms become lucrative targets for hackers. Industry stakeholders are prompted to reassess and reinforce their security protocols to safeguard user funds. The incident also highlights the need for collaboration between exchanges, regulators, and cybersecurity experts to address emerging threats in the evolving crypto landscape.
Amidst the security breach, CoinSpot emphasizes its commitment to user security and financial integrity. The exchange reassures users that their assets are held securely and that measures are being implemented to fortify the platform’s defenses. Additionally, CoinSpot plans to enhance its security infrastructure, incorporating the latest technologies and best practices to mitigate future risks. Users are encouraged to stay informed about security updates and adhere to recommended safety practices in the crypto space.
