Hackers have reportedly stolen $35 million in cryptocurrency from users of Atomic Wallet.
According to Blockchain sleuth ZachXBT(Opens in a new window), the largest one-person loss was $7.95 million; the five biggest individual losses accounted for $17 million.
Over the weekend, Atomic Wallet acknowledged(Opens in a new window) receiving "reports of wallets being compromised." In a Monday update(Opens in a new window), the crypto wallet provider said “less than 1%” of its monthly active users were affected by the breach.
The “last drained transaction was confirmed over 40h ago," said at the time. "Security investigation is ongoing. We report victim addresses to major exchanges & blockchain analytics to trace and block the stolen funds.”
Atomic Wallet did not immediately respond to PCMag’s request for comment. But as BleepingComputer notes(Opens in a new window), Atomic Wallet took down its get.atomicwallet.io download server in response to the suspected breach.
Crypto security researcher Tay(Opens in a new window) said(Opens in a new window) the earliest transaction date with stolen funds was June 2 at 21:45 UTC. According to the researcher, the hacker or hackers responsible swept each token and base asset from the victim's address to a new address before swapping all the stolen tokens for the base asset via decentralized exchanges like uniswap and sunswap. Lastly, the hacker “swept the base asset balance to another new address,” Tay tweeted.
Atomic Wallet has reached out to victims of the hack via email, and asked them to submit account information via a Google Form.
Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.
This newsletter may contain advertising,
Read more on pcmag.com