{"id":68469,"date":"2024-01-08T04:56:18","date_gmt":"2024-01-08T08:56:18","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=68469"},"modified":"2024-01-08T04:56:21","modified_gmt":"2024-01-08T08:56:21","slug":"coinspaid-payment-gateway-suffers-7-5m-hack-cyvers","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/coinspaid-payment-gateway-suffers-7-5m-hack-cyvers\/","title":{"rendered":"CoinsPaid Payment Gateway Suffers $7.5M Hack \u2014 Cyvers"},"content":{"rendered":"\n

CoinsPaid, a cryptocurrency payment gateway, has suffered its second security compromise in six months. Cyvers, a Web3 security firm<\/a>, disclosed detected unauthorized transactions worth approximately $7.5 million.<\/p>\n\n\n\n

\"CoinsPaid
CoinsPaid Payment Gateway Suffers $7.5M Hack \u2014 Cyvers <\/figcaption><\/figure>\n\n\n\n

On January 6, the artificial intelligence system of Cyvers identified several anomalous transactions, which authorized the withdrawal of digital assets valued at $6.1 million in Tether, Ether, USD Coin, and CoinsPaid's native token CPD.<\/p>\n\n\n\n

Cyver's team on X (formerly Twitter) reports that the assailant exchanged an estimated $368,000 worth of ETH for 97 million CPD tokens before transferring the funds to externally owned accounts (EOAs) and cryptocurrency exchanges MEXC\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a>, ChangeNOW, and WhiteBit. As of this writing, CoinGecko data indicates that CPD is trading at $0.0006, a decrease of 39.5% in twenty-four hours.<\/p>\n\n\n\n

Upon additional examination, Cyver detected unauthorized transactions involving BNB that exceeded $1 million in value, bringing the total misappropriated funds to approximately $7.5 million.<\/p>\n\n\n\n

\"\"
Cyvers\u2019 system detected unauthorized transactions on CoinsPaid. Source: Cyvers Alerts<\/figcaption><\/figure>\n\n\n\n

CoinsPaid, an Estonian digital asset payment processor<\/a>, asserts that it has processed more than 19 billion euros worth of cryptocurrency transactions. On account of the assault, the organization has yet to provide a statement.<\/p>\n\n\n\n

Another security compromise occurred on the platform in July 2023, resulting in the theft of more than $37 million. According to CoinsPaid, a fraudster deceived one of its employees with a bogus job interview. <\/p>\n\n\n\n

The employee purportedly accepted a job offer by downloading a malevolent code, granting unauthorized individuals access to CoinsPaid's infrastructure, and facilitating the theft of sensitive data.<\/p>\n\n\n\n

CoinsPaid attributed the breach to the Lazarus Group, backed by the North Korean government<\/a>, in a post-mortem report. The report noted that the group had failed multiple attempts to breach the platform since March 2023. <\/p>\n\n\n\n

Still, after each failure, they resorted to “extremely sophisticated and vigorous social engineering techniques” aimed at employees rather than the organization as a whole.<\/p>\n\n\n\n

In 2023, the Lazarus Group is suspected of orchestrating multiple crypto breaches. According to the blockchain intelligence firm TRM Labs, the group seized at least $600 million in cryptocurrencies last year.<\/p>\n","protected":false},"excerpt":{"rendered":"

CoinsPaid, a cryptocurrency payment gateway, has suffered its second security compromise in six months. Cyvers, a Web3 security firm, disclosed detected unauthorized transactions worth approximately $7.5 million. On January 6, the artificial intelligence system of Cyvers identified several anomalous transactions, which authorized the withdrawal of digital assets valued at $6.1 million in Tether, Ether, USD […]<\/p>\n","protected":false},"author":12,"featured_media":68474,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[5817,17787,17795,17794],"class_list":["post-68469","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-hack-2","tag-coinspaid","tag-cyvers","tag-payment-gateway"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/01\/image-46.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/68469","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=68469"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/68469\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/68474"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=68469"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=68469"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=68469"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}