An event has occurred in CoinStats, a cryptocurrency portfolio manager, resulting in a security breach affecting 1,590 crypto wallets. The company has addressed the breach and promised to update users with more information as it becomes available.
Temporary Suspension of User Activity
In response to the breach, CoinStats has momentarily suspended user activity. In a message posted on X (previously Twitter) on June 22, the company mentioned, “The attack has been controlled, and we have temporarily stopped the application to address the security incident.”
Despite the breach, CoinStats clarified that only 1.3% of its wallets were impacted. The company also reassured users that connected wallets and centralized exchanges (CEXes) were not affected.
Unspecified Damage Assessment
CoinStats has not detailed the complete impact on the affected wallets yet. However, the platform has committed to updating users as more information is uncovered. By requesting read-only access to connected crypto wallets, CoinStats ensures users’ holdings remain secure regardless of circumstances.
CoinStats allows users to link all their wallets and utilize the platform as a comprehensive crypto portfolio tracker, offering a consolidated view of their assets.
List of Impacted Wallets
A Google document disclosing all presently affected crypto wallets has been published by CoinStats. While the list may evolve during the investigation, significant changes are not anticipated. Users with wallet addresses listed are urged to transfer their funds immediately using their exported private key.
Caution Against Scammers
The cryptocurrency community has warned users to stay cautious of scammers posing as helpers following the breach. Pseudonymous crypto commentator PPman cautioned, “Scammers are astute. If your address is on this list or if you’ve used CoinStats and shared it, scammers might try to offer ‘assistance.’ Do not trust anyone.”
Rise in Security Breaches Among Crypto Companies
This incident is part of a string of security breaches affecting the cryptocurrency industry. Most recently, CoinGecko, a crypto data aggregator, confirmed a data breach relating to its third-party email management platform, GetResponse. This breach allowed attackers to extract contact information from over 1.9 million CoinGecko users.
Additionally, a report released by Crystal Intelligence on June 12 highlighted 785 reported hacks and exploits within the crypto sector over the past 13 years. Close to $19 billion in digital assets have been stolen since the first known crypto hack was reported on June 19, 2011.