The hackers’ identity may not be a mystery for much longer.
On Aug. 30, a Github user made a post about losing 1,400 Bitcoin (BTC) via an elaborate hack that affected his Electrum wallet. N-chain analysis indicates that the hackers had a Binance account and that some of the transactions used to move the stolen coins may have originated in St. Petersburg, Russia. However, It is important to note that conclusions afforded by on-chain research are generally more probabilistic than deterministic.
On-chain analysis of the hack. Source: Cointelegraph, Crystal Blockchain.
Even so, there is no clarity on how the attack was perpetrated, as Electrum’s software is considered to be secure if properly configured. The claimant said that the attack happened after he ran the wallet for the first time since 2017. He alleges that when he installed a software update, his entire balance was transferred to an unknown address.
Two hops away from the scammer’s address is a 5 BTC Binance withdrawal that occurred in January 2018. No other entity appears in between, so Binance should presumably have the identity of the hacker or their associates, provided that the exchange had proper know-your-customer procedures in place. Interestingly, Binance CEO Changpeng Zhao tweeted yesterday that his exchange has blacklisted the addresses involved:
We blacklisted the addresses involved, but …
— CZ Binance (@cz_binance) August 30, 2020
After gaining control to over 1,400 BTC, the criminals began to move them around and diversify them into smaller wallets. On a few occasions, the Bitcoin node that processed these transactions was traced to St. Petersburg, Russia — though it is possible the thieves were using a VPN to obscure their true location.
Cointelegraph reached out to Binance for comments but has not received a response in time for publication.
Source: , CoinTelegraph
Articles listed with Cash Tech News as the author are either general information, or may have been imported from another website, to bring our readers a rich media experience that encompasses articles that we find interesting, as well as those curated by others.
The views and opinions expressed here are for informational purposes only, and should not be confused with professional financial advice. These opinions are solely those of the author and do not necessarily reflect the views of CashTechNews.com. Every investment and trade involves risk. You should conduct your own research, and contact your professional financial advisor before making any investment.
Corrections, feedback, and ideas should be submitted through the website contact form.