{"id":1018,"date":"2023-06-05T11:47:35","date_gmt":"2023-06-05T11:47:35","guid":{"rendered":"https:\/\/certerassl.com\/blog\/?p=1018"},"modified":"2023-06-05T12:03:11","modified_gmt":"2023-06-05T12:03:11","slug":"atomic-wallet-security-glitch-35m-cryptocurrency-theft","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/atomic-wallet-security-glitch-35m-cryptocurrency-theft\/","title":{"rendered":"Atomic Wallet Security Glitch Leads to a $35M Cryptocurrency Theft"},"content":{"rendered":"\n

A security vulnerability at Atomic Wallet has stolen over $35 million in cryptocurrency assets since June 2. This desktop and mobile cryptocurrency wallet enable users to store several cryptocurrencies.<\/strong><\/p>\n\n\n\n

Security personnel are looking into what sparked the attack. Reports indicate that the incident involved missing tokens, deleted transaction data, and the complete wiping of cryptocurrency portfolios.<\/p>\n\n\n\n

Atomic Wallet tweeted on June 3 that they had got reports of hacked wallets and were investigating. “We have received the reports of wallets that are allegedly being hacked. To analyze and assess the problem, we are making every effort. It will update this post when more information becomes available,<\/em>” Atomic Wallet tweeted.<\/p>\n\n\n

\n
\"Atomic<\/figure>\n<\/div>\n\n\n

Today’s tweet states that they are cooperating with other security companies to investigate to avoid selling stolen assets on exchanges.<\/p>\n\n\n\n

How much was Stolen because of the Atomic Wallet Hack?<\/h2>\n\n\n\n

Atomic Wallet customers<\/strong> have suffered losses exceeding $35 million in crypto assets<\/strong>, as confirmed by an on-chain investigation conducted by ZachXBT, a pseudonymous Twitter user known for analyzing cryptocurrency thefts and providing support to affected projects. The largest individual loss amounted to $7.95 million in Tether (USDT)<\/strong>.<\/p>\n\n\n\n

ZachXBT said, “It exceeded $14M worth of stolen funds on my graph across Bitcoin, Ripple, ETH, Ripple, Tron, BSC, etc.<\/em>“<\/p>\n\n\n\n

Atomic Wallet operates as a non-custodial decentralized wallet wherein users have direct control and oversight over the assets stored within the platform. As usual, its Terms of Service disclaim any responsibility for user losses incurred on the blockchain. One-part states, “Under no circumstances will Atomic Wallet be liable to you for damages arising out of the services over $50.<\/em>“<\/p>\n\n\n\n

Reaching out to the Victims<\/h3>\n\n\n\n

Early on Saturday morning, users of Atomic Wallet<\/strong> took to social media platforms and the developer’s Telegram channel<\/strong> to report the theft of their digital currencies from their electronic wallets.<\/p>\n\n\n\n

Atomic Wallet<\/strong> has provided little information to users thus far, with the support team only collecting victim addresses and reaching out to major exchanges and blockchain analytics companies to trace and block the stolen funds, as stated in a tweet from June 4, which is the second official communication from the team. Atomic Wallet has required individuals who reached out for assistance to answer over 20 questions concerning their internet service providers, virtual private networks (VPNs) utilization, and the storage methods employed for their seed phrases.<\/p>\n\n\n\n

In addition, a Google Docs form<\/strong> for gathering information on the incident asks for more details from victims.<\/p>\n\n\n\n

While some customers <\/strong>state their Cryptocurrency <\/strong>was taken after the latest software update, a few others report they never performed an update and their cryptocurrency remained stolen.<\/p>\n\n\n\n

The attack is just one of many recent crypto hacks, including the Jimbos Protocol’s $7.5 million exploit and a malicious proposal that took over Tornado Cash’s governance in May. According to a Chainalysis report, crypto hackers stole $3.8 billion last year, mostly through North Korean-linked attacks that exploited decentralized finance protocols. While the exact cause of the security breach remains unclear, users are being advised to transfer their digital currencies to backup wallets as the developers thoroughly investigate the security situation.<\/p>\n\n\n\n

Recent Vulnerabilities and Attacks of 2023<\/h3>\n\n\n\n