On June 22, 2024, CoinStats suffered a wallet breach attributed by the company to Lazarus Group or a related nation-state-level organization. The attacker gained unauthorized access across CoinStats infrastructure and service providers, exposing private keys for 1,590 CoinStats Wallets and causing about $2.2 million in cryptocurrency theft; connected portfolio-tracking wallets and exchange accounts were not affected.
Table 2: DPRK Cryptocurrency Thefts, January - December, 2024. Date: 2024-06-22; Victim: Coinstats; DPRK APT: TraderTraitor; Amount ($ Million): 2.3. Report: "In coordination with Chainalysis and Mandiant, MSMT Participating States have attributed the cryptocurrency heists in tables 2 and 3 to DPRK actors."
CoinStats reveals to have suffered a massive security breach that compromised 1,590 cryptocurrency wallets, draining over $2 million in virtual assets, with the attack suspected to have been carried out by North Korean threat actors. [Date Occurred: 21/06/2024; Date Discovered: 21/06/2024]
we gathered enough evidence to confidently attribute the attack to the Lazarus Group or a related organization with a nation-state level of sophistication and resources.
2024-06-22 Coinstats TraderTraitor 2.3