Web Infrastructure Attack

Poloniex Exchange Suffers $122.98 Million Security Breach

November 10, 2023
Attack Types: 
Private Key Compromise ,Web Infrastructure Attack
Entity Types: 
Custodian ,Exchange
Tags: 
Lazarus Group ,North Korea
Target Entities: 
Poloniex

Summary # On November 10, 2023, Poloniex, a custodial centralized exchange, experienced a security breach due to a private key compromise. The attacker exploited Poloniex’s hot wallets and withdrew funds across three chains: Bitcoin, Ethereum, and Tron. The total losses amounted to approximately $122.98 million, including BTC, USDT, USDC, ETH, TRX, and other assets. The stolen assets were exchanged for native tokens and transferred to sereval addresses. Attackers # The attackers believed to be the Lazarus Group, North Korean cybercrime group. ...

Eterbase Exchange Security Breach with a Loss of $5,400,000

September 7, 2020
Attack Types: 
Wallet Hack ,Web Infrastructure Attack
Entity Types: 
Exchange ,Custodian
Target Entities: 
Eterbase

Summary # Eterbase, a European cryptocurrency exchange, based in Slovakia, suffered a significant security breach on September 7, 2020. Multiple hot wallets were compromised, including in Bitcoin, Ethereum, Tron, Tezos, Algorand and Ripple chains, leading to the theft of approximately $5,400,000 in various cryptocurrencies. The stolen funds were moved to different addresses and subsequently withdrawn to centralized exchanges like Binance, Huobi, and HitBTC. Attackers # The identity of the attackers remains unknown. ...