Stake.com

Stake.com Suffers $41.4 Million Security Breach

September 4, 2023
Attack Types: 
Wallet Hack ,Infrastructure Attack
Entity Types: 
Custodian ,Gambling Platform
Target Entities: 
Stake.com

Summary # On September 4, 2023, Stake.com, a crypto gambling protocol offering casino games and sports betting, was targeted by the Lazarus Group (also known as APT38), a group of DPRK cyber actors. The group exploited access control vulnerabilities and extracted approximately $41.4 million worth of various digital assets from the platform’s hot wallets across Ethereum, Binance Smart Chain (BSC), and Polygon networks. Stake.com reassured users that their funds were safe, and all other wallets remained operational. ...