Crypto Payment Gateway CoinsPaid Hacked for $7.5 Million

Another one bites the dust! CoinsPaid, a popular crypto payment gateway, has been hit by a second security breach in just six months. This time, unauthorized transactions totaling a staggering $7.5 million have been reported. Let’s dive into what happened and what it means for the crypto world.

What Happened to CoinsPaid?

Web3 security firm Cyvers detected multiple irregular transactions on January 6th. These transactions led to the withdrawal of approximately $6.1 million in digital assets, including Tether (USDT), Ether (ETH), USD Coin (USDC), and CoinsPaid’s own native token, CPD.

Here’s a quick breakdown of the initial findings:

• Initial Loss: $6.1 million in USDT, ETH, USDC, and CPD.
• CPD Swap: 97 million CPD tokens (worth ~$368,000) were swapped for ETH.
• Destination: Funds moved to externally owned accounts (EOAs) and crypto exchanges like MEXC, WhiteBit, and ChangeNOW.

Further investigation revealed unauthorized transactions involving BNB worth over $1 million, pushing the total stolen amount to roughly $7.5 million.

A History of Hacks: Deja Vu for CoinsPaid

This isn’t CoinsPaid’s first rodeo with security breaches. Back in July 2023, the platform suffered a more significant attack, resulting in the theft of over $37 million. CoinsPaid pointed the finger at the North Korean Lazarus Group, claiming they used a fake job interview to plant malicious code within their infrastructure.

Lazarus Group: The Usual Suspects?

Speaking of the Lazarus Group, they’ve been quite busy in the crypto hacking scene. TRM Labs estimates they pilfered at least $600 million in crypto last year alone. Are they behind this latest CoinsPaid breach? It remains to be seen, but their track record certainly makes them a prime suspect.

See Also: North Korean Hacking Group Lazarus Withdraws $1.2M of Bitcoin From Coin Mixer

What’s Next for CoinsPaid and its Users?

As of now, CoinsPaid hasn’t released an official statement regarding the recent attack. This silence leaves users in the dark, wondering about the security of their funds and the platform’s future.

Key Takeaways:

• Security is Paramount: This incident underscores the critical importance of robust security measures for crypto platforms.
• Stay Informed: Keep up-to-date with security news and be wary of potential risks.
• Diversify Your Holdings: Don’t put all your eggs in one basket. Spreading your crypto assets across multiple platforms can mitigate risk.

See Also: Bit24.cash Crypto Exchange Exposed KYC Data Of 230,000 Users

In Conclusion: A Wake-Up Call for the Crypto Industry

The CoinsPaid hack serves as a stark reminder of the ever-present threats in the crypto world. As the industry continues to evolve, security must remain a top priority. Users, platforms, and regulators all have a role to play in creating a safer and more secure environment for digital assets.