Around 1,590 Crypto Wallets Affected Due to CoinStats Security Breach

• CoinStats recently suffered a security breach, where about 1,590 crypto wallets were affected.

CoinStats suffered a security breach late into Saturday as iOS and Android users reported receiving questionable notifications about them being eligible for rewards. 

However, the notifications took them to a shady website asking them to download another application to receive the rewards.

CoinStats updated users about the same on X. “Some iOS users received a scam notification. We’re investigating it. Sorry for the inconvenience. We’ll update you ASAP. Thanks for your understanding.” Some Android users reported the same issue after CoinStat’s post went up.

Hey frens,

Some iOS users received a scam notification. We're investigating it.

Sorry for the inconvenience. We'll update you ASAP.

Thanks for your understanding. pic.twitter.com/8CRBrC6JxB

— CoinStats (@CoinStats) June 22, 2024

It took to X a couple of hours later to confirm it was indeed “experiencing a security incident affecting wallets created directly within CoinStats; this does not impact externally connected wallets.” The post also asked users to move their funds “ASAP” if they had their private keys exported.

We are currently experiencing a security incident affecting wallets created directly within CoinStats; this does not impact externally connected wallets.

If you have your private key exported, move your funds ASAP.

— CoinStats (@CoinStats) June 22, 2024

The security issue only affected users who used wallets natively created on CoinStats, not wallets from external providers connected to it. 

The platform is a portfolio tracker, allowing users to connect all their wallets to a single application and manage their holdings and investments. It has gained immense popularity by making it easy for users to deal with the crypto ecosystem.

A few hours after its post confirming the breach, CoinStats posted again to let its users know that “The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident.” 

Update on the Security Incident

The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident. 

1. None of the connected wallets and CEXes were impacted.

2. Thanks to the immediate incident reponse from the CoinStats team,…

— CoinStats (@CoinStats) June 22, 2024

It also mentioned its security team acted quickly, thanks to which only “1.3% of all CoinStats Wallets were affected, totaling 1,590 wallets.”

It further linked a Google Doc in the post, displaying wallets affected by the breach so those impacted could move their funds elsewhere. CoinStats has taken its platform offline and has switched user wallet settings to read-only.

It let users know that it continues to investigate the extent to which the breach has caused damages but said it would not be much compared to what it has found. 

Nevertheless, one user commented on the posts claiming that the funds from their external wallet got drained due to the breach. Future updates from CoinStats will reveal the true extent of the attack.