Additional $37 million found in web3 casino hack
Date: 2023-07-25 Categories: CASINO, CRYPT
Alphapo, a cryptocurrency payment service provider, has reportedly experienced a significant security breach in its hot wallet, resulting in over $60 million in losses, with some reports suggesting total losses could be around $100 million, according to web3 antivirus company De.Fi.
The initial hack was discovered on July 23 by blockchain researcher ZachXBT, who reported that “Alphapo’s hot wallets were emptied of over $23 million in ETH, TRON, BTC.”
A wallet owned by Alphapo was reportedly hacked across multiple platforms, with the stolen funds dispersed across various external accounts (EOA).
ZachXBT posted an update on their investigation on July 25, commenting:
“An additional $37 million stolen in TRON and BTC from this hack has been discovered.
Now the total amount stolen reaches 60 million dollars.
This hack was probably done by Lazarus as they create a very clear fingerprint on the network.”
Ongoing attack
According to De.Fi, web3 antivirus, Alphapo is an important channel for processing payments for gaming services such as HypeDrop, Bovada and Ignition. After the HypeDrop hack, one of Alphapo's clients had to quickly disable withdrawal services.
In a statement released on July 23, HypeDrop assured its users that "if your payment has been affected, your funds are safe." The company also said it is actively monitoring the situation and will provide updates as more information becomes available.
HypeDrop later updated users stating,
“Please know that your HypeDrop funds are safe, but we have encountered an issue on the side of the cryptocurrency provider.
Once the provider resumes operations, the processing of deposits will be credited accordingly.”
The funds of the attacked wallet, known as Alphapo.eth, were converted into Ethereum (ETH) by the hackers. The funds were then sent through various channels, including Avalanche and Bitcoin. Data from the Etherscan transaction records indicates a constant outflow of funds from the Alphapo.eth wallet. According to initial estimates, the value of the stolen tokens is about $31 million.
The attacker or attackers involved in the incident are reported to be associated with the addresses "0x6d2e8", "0x040a9", "TDoNAZ", and "TKSitn".
The cybersecurity community unanimously believes that the investigation into the Alphapo incident is still ongoing.
Preliminary data from De.Fi suggests that a leaked private key could be a potential hack.
The exact amount of bitcoins stolen remains unconfirmed outside of De.Fi and ZachXBT predictions. However, at the time of publication, over $60 million had been discovered.
The initial hack was discovered on July 23 by blockchain researcher ZachXBT, who reported that “Alphapo’s hot wallets were emptied of over $23 million in ETH, TRON, BTC.”
A wallet owned by Alphapo was reportedly hacked across multiple platforms, with the stolen funds dispersed across various external accounts (EOA).
ZachXBT posted an update on their investigation on July 25, commenting:
“An additional $37 million stolen in TRON and BTC from this hack has been discovered.
Now the total amount stolen reaches 60 million dollars.
This hack was probably done by Lazarus as they create a very clear fingerprint on the network.”
Ongoing attack
According to De.Fi, web3 antivirus, Alphapo is an important channel for processing payments for gaming services such as HypeDrop, Bovada and Ignition. After the HypeDrop hack, one of Alphapo's clients had to quickly disable withdrawal services.
In a statement released on July 23, HypeDrop assured its users that "if your payment has been affected, your funds are safe." The company also said it is actively monitoring the situation and will provide updates as more information becomes available.
HypeDrop later updated users stating,
“Please know that your HypeDrop funds are safe, but we have encountered an issue on the side of the cryptocurrency provider.
Once the provider resumes operations, the processing of deposits will be credited accordingly.”
The funds of the attacked wallet, known as Alphapo.eth, were converted into Ethereum (ETH) by the hackers. The funds were then sent through various channels, including Avalanche and Bitcoin. Data from the Etherscan transaction records indicates a constant outflow of funds from the Alphapo.eth wallet. According to initial estimates, the value of the stolen tokens is about $31 million.
The attacker or attackers involved in the incident are reported to be associated with the addresses "0x6d2e8", "0x040a9", "TDoNAZ", and "TKSitn".
The cybersecurity community unanimously believes that the investigation into the Alphapo incident is still ongoing.
Preliminary data from De.Fi suggests that a leaked private key could be a potential hack.
The exact amount of bitcoins stolen remains unconfirmed outside of De.Fi and ZachXBT predictions. However, at the time of publication, over $60 million had been discovered.
