The latest news from the crypto payment gateway CoinsPaid underscores a harsh reality.
More specifically, the company confronts its second major security breach in just six months. This incident highlights critical vulnerabilities in the crypto ecosystem. It also draws attention to the need for heightened security measures and user awareness.
A Troubling Pattern: CoinsPaid’s Security Challenges
CoinsPaid, an established Estonian digital asset payment processor, is grappling with a significant security breach. This recent event marks the second such incident quickly, raising questions about the company’s ability to safeguard its assets and client trust. CoinsPaid has a substantial track record, having processed over 19 billion euros in crypto transactions, but these breaches cast a shadow over its achievements.
Rewinding to July 2023, CoinsPaid faced a similar predicament when it suffered a security breach resulting in the theft of over $37 million. The method used by the attackers was as cunning as it was simple: a fake job interview. An unsuspecting employee, lured by a job offer, inadvertently downloaded malicious software. This software gave the attackers deep access to CoinsPaid’s infrastructure, leading to substantial financial loss.
CoinsPaid attributed this attack to the notorious Lazarus Group, a North Korean state-backed entity. This group, known for its sophisticated cyber tactics, had reportedly targeted the platform since early 2023.
The Latest Breach: An Alarming Escalation
Fast forward to January 2024, and history repeats with a different twist. The recent breach involved unauthorized transactions amounting to nearly $7.5 million. Cyvers, a Web3 security firm, played a crucial role in detecting these irregularities through its AI system. The attack was meticulously executed, involving multiple cryptocurrencies, including USDT, USDC, ETH, and the native CPD asset.
Cyvers’ team, through their X (formerly Twitter) account, shed light on the attackers’ methods. Approximately 97 million CPD tokens were swapped for ETH, valued at around $368,000. These funds were then moved to externally owned accounts and various crypto exchanges, including MEXC, WhiteBit, and ChangeNOW.
The in-depth investigation by Cyver uncovered further unauthorized transactions. This time, BNB worth over $1 million was involved, pushing the total loss close to the $7.5 million mark.
The Ripple Effect: Consequences and Reflections
These security breaches at CoinsPaid are not just a blow to the company but resonate throughout the crypto community. They serve as a stark reminder of the vulnerabilities inherent in digital asset transactions and the sophistication of cybercriminals.
For CoinsPaid, these incidents have potentially eroded customer confidence and brought scrutiny to its security measures.
Moreover, the breaches highlight the importance of robust security protocols in the crypto world. It’s a wake-up call for similar companies to strengthen their defenses and for users to be vigilant about their digital assets.
Disclaimer
For paid/sponsored articles, FintechMode neither endorses nor takes responsibility for the accuracy, timeliness, quality, and content of said articles. The statements, views and opinions expressed in paid/sponsored articles are solely those of the content provider and readers are reminded that Cryptocurrency products are unregulated in most locations and can be highly risky. Do your own research and consult relevant financial experts before making any investment decisions. FintechMode will not be held accountable, either directly or indirectly, for any harm or loss that may stem from or be linked to the usage or reliance on any information, goods, or services mentioned on this page. If you have any concerns, please email [email protected] or refer to our Terms & Conditions
