On July 13, Beijing-based blockchain security firm Chainsmap reported that more than 10 of the 336 bitcoins previously stolen from cryptocurrency exchange Cashaa have already flowed into exchanges including Bitmex and Kraken. Small amounts of the stolen bitcoins have also entered two other exchanges after being mixed. Cashaa had earlier disclosed the hacker address receiving the stolen funds, suggesting the theft may be linked to hackers in India, and has since strengthened joint defenses with exchanges in the Indian region.
Based on analysis of publicly available information from Cashaa, SXWK, a blockchain security expert at Beijing Chain Security, stated that the stolen bitcoins originated from user deposits made between 4:04 AM and 8:10 AM Beijing time on July 11. These funds were quickly aggregated and transferred to the hacker's address. The characteristics suggest the attacker closely monitored exchange activities and likely carried out the theft during the aggregation process. If internal exchange risk control issues are ruled out, it is highly probable that the exchange was previously compromised via an APT attack, allowing the attacker to implant a backdoor.
Add to Favorites
Share to Social Media
