Stake.com’s $41M hack: Implications and lessons in crypto security

2023-10-18 20:03

Stake.com was recently hacked for $41 million. What happened during the incident? How did the crypto casino giant respond to the attack? The implications and lessons for crypto.

The security breach that saw online crypto casino Stake.com lose $41 million to hackers on September 4 is among the most notable attacks to hit the cryptocurrency industry this year. Since the incident, blockchain security analysts and law enforcement have linked the “suspicious outflows,” to a sovereign state actor – North Korea’s Lazarus Group.

On September 7, the  Federal Bureau of Investigation (FBI) released a report that identified the Lazarus Group as the hacker responsible for the theft. The FBI also pinned several other crypto hacks to the group, including the attacks on Alphapo, CoinsPaid, and Atomic Wallet. The group is reportedly responsible for attacks that have seen more than $200 million in crypto stolen in 2023 alone.

Understanding what happened

Blockchain data revealed that the Stake.com hack started with a transaction on Ethereum, with hackers transferring roughly $3.9 million of the stablecoin Tether (USDT). 

The attackers then   withdrew 6,001 Ether (ETH), worth about $9.8 million at the current market price. Also withdrawn was approximately $1 million in USD Coin (USDC), $900,000 worth of Dai (DAI), and 333 Stake.com Classic (STAKE) tokens, each valued at $75.48.

While initial reports indicated stolen crypto funds amounted to $16 million, that rose to $41 million.

On September 7, the platform disclosed that the hacker had begun cross-chain transactions by transferring funds to the BTC blockchain through new wallets on Polygon and Avalanche. As of September 8, $4.5 million has been moved to BTC addresses. Meanwhile, the majority of the stolen funds, approximately $36 million, remain on the Ethereum, Polygon, and BNB Chain networks.

Stake.com assured its customers that user funds were safe and that only a small percentage of the online casino’s total funds had been affected. But amidst the incident, many fake accounts on X (formerly Twitter) cropped, with fake updates that tried to trick people into clicking on phishing links for refunds.

Understanding hot wallets and cold wallets

Crypto wallets are essential for storing and managing cryptocurrency assets. They come in two main types: hot wallets and cold wallets. Both types of wallets have their own advantages and disadvantages. The right type of wallet depends on how much crypto an individual holds, their security preferences, and how accessible they want their funds to be.

Hot crypto wallets are always connected to the internet, with examples being exchange wallets. They are typically free and allow users to store, send, receive, manage, and view their cryptocurrency assets. Access is via any internet-enabled device, including phones, tablets, and PCs. It is why hot wallets are preferred for easy access and trading.

But while hot wallets offer convenience and quick transactions, they are less secure when it comes to storing high-value assets. The risk of hacking is higher compared to cold wallets.

As cold wallets store assets offline, with access via hardware devices, the threat of being hacked is significantly lower. Use of cold wallets has increased, especially after the collapse of FTX, and hacks on several other centralised crypto exchanges.

Looking over the security aspects

Wallets work with public and private keys, which are the cryptographically generated strings of letters and numbers that authorise crypto transactions.In traditional banking terminology, the public key is like a user’s account name while the private keys are like the password needed to access the account. Without it, you cannot access the stored cryptocurrencies.

Adding a layer of security is key to use of hot wallets, and this can be achieved in various ways, including splitting wallet keys and storing them in different places. Other controls like limits to  fund transfers, frequency, and eligible receiving addresses could be helpful. Such measures helped limit the Stake.com hacker to its bankroll pool and ETH/BSC.

Stake.com’s response to the hack

According to Ed Craven, co-founder of Stake.com, the platform has a small percentage of its crypto reserves in a hot wallet. However, he noted in an interview with DL News that the breach was not because of the hackers acquiring Stake.com’s hot wallet private keys.

Craven also noted in a blog post on Medium, that the company’s team acted swiftly following the hack, halting all withdrawals and deposits to prevent further theft.

This was done within 20 minutes, with malicious components disabled and necessary containment measures put in place within 4 hours. As a result, the attack impacted only a small portion of Stake.com’s reserve funds meant for large winnings. Stake.com also quickly resumed its operations and began crediting customers who sent funds during the exploit. 

Meanwhile, the company is working with law enforcement and cybersecurity experts as they look to unmask and apprehend the hackers.

Stake, which supports 18 cryptocurrencies as a payment method, also noted that the two games impacted by the security breach will remain disabled throughout the investigation. 

Lessons for the crypto industry

The recent security breach at Stake.com has sounded alarms about the robustness of online crypto platform securities. Major security compromises in history, such as Sony’s 2011 PSN intrusion and the 2017 Equifax data exposure, have served as crucial learning points in their sectors. 

Likewise, the Stake.com incident highlights the imperative for bolstered defence mechanisms in the rapidly evolving crypto space. Such vulnerabilities, if left unaddressed, could not only impact immediate financial holdings but also erode long-standing reputations.

Given the jeopardy faced by Stake.com’s financial reserves, there’s unease concerning the reliability of cryptocurrency in everyday practical business application. This loss in consumer and business confidence could translate to potential delays or reductions in disbursements, an adverse outcome for creators, especially those recently migrating to Kick in search of a more lucrative platform. Yet, if Stake.com can adeptly navigate through this turbulence and curtail the repercussions, its overarching fiscal health may remain intact.

This breach has prompted industry specialists to reexamine the inherent risks of amalgamating cryptocurrency functionalities with platforms akin to Kick. The incident serves as a clarion call for companies pondering similar integrations.

To fortify defences, platforms should advocate for encrypted transactions, unwavering data protection, uphold fairness through Random Number Generator (RNG) protocols, and emphasise layered account safeguards. Furthermore, it’s paramount to offer secure transactional methods, sustain vigilant surveillance, and ensure dedicated customer engagement.

For casinos aiming for sustainability and adaptability amidst sophisticated threats, incorporating AI-centric fraud detection becomes pivotal. Regular security evaluations and pertinent certifications solidify a commitment to preserving a trustworthy environment for its user base while upholding the platform’s esteemed reputation.

The resilience of Stake.com’s operations

Stake.com, founded in 2017 and is headquartered in Curacao, is one of the leading crypto casinos in the world. The platform generated around $2.6 billion in revenue in 2022 and recent reports revealed that the gambling platform recorded over 900M bets in August.

Beyond its primary casino functionalities, Stake.com has forged strong ties with Kick Streaming, a platform celebrated for sponsoring renowned streamers, including Adin Ross, Amouranth, and XQC. Notably, the platform also boasts a partnership with Drake as a prominent ambassador, further elevating its prominence in the industry.

The hacking incident underscores the importance of ongoing security enhancements, heightened vigilance, and user education to safeguard both experienced and novice crypto gamblers.

Before the recent hack, Stake.com had taken various security measures to protect user data and funds. The platform required complex passwords and implemented two-factor authentication (2FA) to add an extra layer of security to user accounts. These measures are designed to make it difficult for unauthorised individuals to access user accounts.

The company also performed regular security audits to identify and fix potential vulnerabilities. This is an attempt to stay ahead of cybercriminals. It also used encryption technologies to protect user data and financial transactions.

In addition, the platform also provided guidance to users, warning them against playing high-risk games that could expose them to hacks. Safe gambling, also known as responsible gambling, is highly encouraged.

To gamble safely, Stake.com advises players to balance gambling with other recreational activities, set a spending plan and time limit, bet with affordable funds, take breaks, and grasp the odds and associated risks. The company also reminds players not to let losses overly upset or anger them during gambling sessions.

However, it is essential to note that no security measure is perfect. The Stake.com hack demonstrates that even well-established and well-funded crypto casinos can be vulnerable to attack. The company promises to continue investing in cyber security to adapt quickly to emerging threats.

Conclusion

Stake.com has shown greater resilience in the wake of the security breach, taking significant steps to enhance security and protect user data and funds. However, the incident highlights that even well-established crypto platforms are not immune to such attacks. 

The critical role of hot wallets in another take from the incident, with Stake.com’s strategic use of secure hot wallets enabling a swift recovery and the protection of user funds. Yet, as the industry continues to mature, hacks highlight the fact that crypto casinos, including Stake.com, need to prioritise continuous vigilance, robust security measures, and proactive incident response mechanisms to ensure the safety of digital assets.

The post Stake.com’s $41M hack: Implications and lessons in crypto security appeared first on CoinJournal.

Similar to Notcoin - Blum - Airdrops In 2024

origin »

Emerald Crypto (EMD) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 4.67 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Цена в час новости $ 0.0095806 (-100%)

crypto stake casino lessons security implications giant

crypto stake → Результатов: 126


How to Stake (Shiba, VET, ADA, DOT etc.) on Crypto.com: Crypto.com Staking Fees & Rewards

How Do I Stake CRO On The Crypto. com Exchange? CRO is the native coin of the popular exchange site Crypto. com, and like many coins it can be staked for rewards in return. In order to stake CRO you will need at least 1,000 of it, but to start benefitting from rebates and discounts, and more […] The post How to Stake (Shiba, VET, ADA, DOT etc.

2021-8-20 20:09


OKEx and MXC bring $40M of new capital to grow Solana (SOL) ecosystem

CryptoNinjas » OKEx and MXC bring $40M of new capital to grow Solana (SOL) ecosystem The Solana Foundation, overseers of the Solana Layer-1 proof of stake blockchain, announced today it has partnered with crypto exchanges, OKEx and MXC, to launch two strategic investment funds that will bring $40 million of new capital to accelerate the development of key projects in the Solana ecosystem.

2021-3-26 23:32


Фото:

Rice-Based Stablecoin Is Being Launched in Indonesia

PRESS RELEASE. Penjaga Lilin Nusantara, an Indonesian Cooperative in Malang – East Java is setting up Ricetron.com a Tron-based DeFi to tokenized rice-based stablecoin. The website aims to invite crypto enthusiasts to stake Tron and mint RET (Rice Economy Token), a governance token that will fund RIC (Rice Inventory Coin) stablecoin. RET token holders will […]

2021-1-20 09:00


Loans now available on the Crypto.com Exchange

Crypto. com today announced the launch of cryptocurrency-backed loans on the Crypto. com Exchange. Users can now receive an instant loan when using their crypto as collateral. Highlights Deposit accepted cryptocurrency and receive a loan instantly; Repay loans partially or in full at any time without early repayment fees; Interest rates as low as 1% APR, stake […] CryptoNinjas.

2021-1-16 22:00


Фото:

South Korean Gaming Giant Planning to Buy Crypto Exchange Bithumb for $460 Million

Nexon, the South Korean multi-billion-dollar gaming conglomerate, is reportedly planning to buy a 65% stake in troubled crypto exchange Bithumb in a deal worth about 500 billion won ($460 million). ● According to local media reports, Nexon is to buy all the shares owned by Bithumb chairman Lee Jung Hoon, including several others totaling up […]

2021-1-8 04:30


Фото:

Banca Generali to Provide Cryptocurrency Custody through Conio Investment

It was announced that Banca Generali has invested $14 million into Conio to acquire a stake in the fintech firm and have the ability to integrate Conio’s cryptocurrency services.  Banca Generali Boards the Crypto Train Banca Generali has been voted as one of the best private banks in Italy and is one of the largest … Continued The post Banca Generali to Provide Cryptocurrency Custody through Conio Investment appeared first on BeInCrypto.

2020-12-15 14:24


Фото:

Fantom uses Band Protocol’s (BAND) price oracles to launch Liquid Staking

Fantom — a scalable, fast, and secure platform for DeFi, supply chains, and even crypto payments — just launched a new DeFi protocol called Liquid Staking. The service combined its own technology with Band Protocol’s (BAND) decentralized price oracles to bring liquidity to stake assets on its layer-1 protocol, and being the first project in crypto history to ever do so.

2020-12-13 12:41