Key Takeaways:
- Crypto portfolio tracker CoinStats suffered a security incident that compromised over 1,500 user wallets.
- Following the hack, the platform took immediate action, suspending all user activity
- Hack affected approximately 1.3% of all CoinStats wallets.
In response to a recent security incident, CoinStats, the popular crypto portfolio app, has temporarily shut down its application. The company reported that the breach affected 1,590 wallets, which constitutes approximately 1.3% of all CoinStats wallets.
Despite the breach, connected wallets and centralized exchanges (CEXes) remained unaffected, according to the company’s statement.
The security breach was identified on June 22, prompting CoinStats to immediately isolate the incident by shutting down the application. The company revealed that the breach impacted a limited number of wallets and reassured users that none of the connected wallets and CEXes were compromised.
However, some users reported that their external wallets were drained, contradicting the company’s initial claims. One user mentioned, “It did affect outside wallets. My Coinbase wallet was drained.”
CoinStats CEO, Narek Gevorgyan, disclosed that the attack was a phishing scheme targeting iOS device users. The total amount drained from the affected wallets is estimated to be around $2 million, with $800,000 of that amount coming from two wallets that imported their seed phrases to CoinStats Wallet.
The CEO suggested that the attack might be part of a coordinated effort by threat actors from North Korea.
Some private keys kept on CoinStats servers were also apparently compromised as part of the assault. As a result, the company believes that hackers were able to gain access to the internal systems that generate wallets for its users.
For the time being, it is unclear how much money was stolen in this incident. CoinStats has provided a list of wallet addresses that were compromised in this event.
