Security incident · 2024-01-06
CoinsPaid
According to the public DefiLlama incident dataset, CoinsPaid (Ethereum, Binance Smart Chain) suffered a security incident on 2024-01-06, with about $7.5M reported lost.
| Date | 2024-01-06 |
|---|---|
| Reported loss | $7.5M |
| Chain | Ethereum, Binance Smart Chain |
| Target type | CEX |
| Technique class | Key Compromise |
| Technique | Hot Wallet Key Compromised |
| Bridge incident | No |
| Within 2024 | #30 by loss that year, 0.4% of all reported losses that year |
How this kind of attack works
Private keys or signing rights that controlled the funds were stolen, and the attacker moved the money with valid signatures. On chain it looks like a normal transfer.
Would a pre-payment check have helped
Key compromise is a wallet and key-security matter; screening the counterparty or endpoint does not touch it.