Summary # In January 2015, LocalBitcoins, a peer-to-peer Bitcoin trading platform, experienced a security breach that resulted in the theft of 17 BTC (approximately $3,850 at the time). The breach was caused by a vulnerability in the platform’s forum software, which allowed the attacker to gain access to user accounts. LocalBitcoins quickly responded to the incident by disabling the forum and reimbursing affected users.
Attackers # The identity of the attacker remains unknown.
...
Summary # During the events that unfolded between November 2014 and February 2015, an unknown attacker targeted Bitstamp employees through phishing messages and exploiting compromised accounts to steal the hot wallet file. During the attack, 18,866 BTC ($6.7 million adjusted for inflation) were stolen. Bitstamp suspended trading, notified customers, and eventually compensated them for their losses. The security failure stemmed from employees falling prey to social engineering attacks and distributing malware-laden files.
...
Summary # Between 2011 and 2014, Mt. Gox, once the largest Bitcoin exchange, experienced a series of attacks that ultimately led to its downfall. A combination of transaction malleability attacks, poor security practices, and mismanagement resulted in the loss of approximately 850,000 BTC, valued at over $450 million at the time. As a consequence, Mt. Gox filed for bankruptcy, and its CEO, Mark Karpeles, faced legal action.
Attackers # The attacker behind the Mt.
...
Summary # In July 2012, BTC-e, a cryptocurrency exchange, experienced a security breach that resulted in the loss of around 4,500 BTC. The hack was enabled by a combination of weak security practices and system vulnerabilities, which allowed the attackers to obtain Liberty Reserve API keys and exploit the deposit algorithm. BTC-e claimed to have compensated affected customers and improved security measures following the attack, resuming normal operations within a few days.
...
Summary # On October 5, 2011, Bitcoin7, a cryptocurrency exchange, suffered a security breach that resulted in the loss of approximately 5,000 BTC. The attack was facilitated by a combination of weak security practices and system vulnerabilities, which allowed the attackers to gain unauthorized access to the exchange’s hot wallet. Bitcoin7 claimed to have compensated affected customers and improved security measures following the attack, resuming normal operations within a few days.
...