Online casino platform MetaWin suffered an exploit on Nov. 3, leaving the platform drained of approximately $4 million in funds, which the CEO says have been “topped off” since the attack.
According to MetaWin CEO Skel, the attacker hacked MetaWin’s hot wallets via the platform’s frictionless withdrawal system — prompting the platform to halt withdrawals. However, the CEO also said that withdrawals were restored for 95% of the platform’s customers at the time of writing.
Onchain sleuth ZackXBT also revealed that the attacker moved the stolen funds to KuCoin and a HitBTC nested service. The detective also identified more than 115 addresses associated with the malicious actor.
At this point, the hacker’s identity and the motivation behind the exploit are currently unknown. Coinpectra reached out to MetaWin for comment but could not obtain a response by the time of publication.
Related: October crypto losses reach $129M from hacks and exit scams
The most recent hacks and losses
The MetaWin hack is the latest cybersecurity attack in the crypto world. On Oct. 16, the lending platform Radiant Capital was exploited for $58 million after a malicious actor gained access to several of the private keys required to sign transactions from Radiant’s multisignature wallet.
Once the attacker obtained the private keys, they took control of Radiant smart contracts on the BNB Chain and the Arbitrum network — allowing the hacker to transfer the funds to themselves.
Several decentralized applications fell prey to a sophisticated phishing attack on Oct. 30 that compromised the popular Lottie Player animation library used by many websites and tech companies.
Exploiting the Lottie animation library allowed the threat actors to display malicious phishing links featured as seemingly benign elements on the web pages of 1inch, TEN Finance, and others.
Unsuspecting users who clicked on the fraudulent links were directed to connect their wallets, which were then drained of funds using the infamous “Ace Drainer” phishing software.
More recently, the M2 exchange was hacked for $13 million. Like the recent Metawin exploit, the M2 exchange suffered a breach of the exchange’s hot wallets — which are connected to the internet and can be remotely accessed by anyone with enough technical knowledge.
Explore more articles like this
Subscribe to the Markets Outlook newsletter
Get critical insights to spot investment opportunities, mitigate risks, and refine your trading strategies. Delivered every Monday
Coinpectra is a free to read website, by purchasing a product through affiliate links in our content, we may earn a commission at no extra cost for our readers. Which will allow us to finance our operations and continue with our research work for our readers. We ensure all recommendations go through in-depth editorial checks to maintain accuracy and quality. You can learn more about this on Content Guidelines and How We Rate pages.
1
1
1
1
1
