{"id":127143,"date":"2023-07-25T12:31:38","date_gmt":"2023-07-25T12:31:38","guid":{"rendered":"https:\/\/dripp.zone\/news\/additional-37m-discovered-in-web3-casino-payment-provider-hack-crypto-news\/"},"modified":"2023-07-25T12:31:39","modified_gmt":"2023-07-25T12:31:39","slug":"additional-37m-discovered-in-web3-casino-payment-provider-hack-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/additional-37m-discovered-in-web3-casino-payment-provider-hack-crypto-news\/","title":{"rendered":"Additional $37M discovered in web3 casino payment provider hack\n &#8211; Crypto News"},"content":{"rendered":"<p><\/p>\n<div id=\"\">\n<div class=\"code-block code-block-2\" style=\"margin: 8px 0; clear: both;\"> <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/link.cryptoslate.com\/Upland-June2023\" class=\"placement\" style=\"width: 300px\"><noscript><\/noscript><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" width=\"600\" height=\"500\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2023\/06\/upland_tokyo_square.jpg\" alt=\"Upland: Berlin Is Here!\"\/><\/a><\/div>\n<p>Alphapo, a cryptocurrency payment service provider, reportedly suffered a significant security breach within its hot wallet, resulting in a loss of over $60 million, with some reports suggesting total losses could amount to around $100 million, according to <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/DeDotFiSecurity\/status\/1683007492844929025\">De.Fi<\/a>the web3 antivirus company.<\/p>\n<p>The original hack <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/zachxbt\/status\/1683747073227624448\">was discovered<\/a> on July 23 by blockchain investigator, ZachXBT, who reported that &#8220;Alphapo hot wallets were drained for $23M+ on ETH, TRON, BTC.&#8221;<\/p>\n<p>A wallet belonging to Alphapo was reportedly hacked across the multiple platforms, with stolen funds being dispersed across various External Owned Accounts (EOAs).<\/p>\n<p>ZachXBT posted a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/zachxbt\/status\/1683747073227624448?s=20\">updates<\/a> to his investigation on July 25, commenting,<\/p>\n<blockquote>\n<p>\u201cAn additional $37M stolen on TRON &#038; BTC from this hack has been located.<\/p>\n<p>This now brings the total amount stolen to $60M.<\/p>\n<p>This hack appears to have likely been done by Lazarus as they create a very distinct fingerprint on-chain.\u201d<\/p>\n<\/blockquote>\n<h2>Ongoing attack<\/h2>\n<p>As reported by <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/DeDotFiSecurity\/status\/1683007492844929025\">De.Fi<\/a>, the web3 antivirus, Alphapo is a crucial conduit for processing payments for gambling services such as HypeDrop, Bovada, and Ignition.  Following the breach, HypeDrop, one of Alphapo&#8217;s customers, had to swiftly turn off withdrawal services.<\/p>\n<p>In a statement <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/HypeDrop\/status\/1682832668201721856?s=20\">released<\/a> on July 23, HypeDrop reassured its users that &#8220;if your payment has been affected, your funds are secure.&#8221;  The company also stated that it is actively monitoring the situation and would provide updates as more information becomes available.<\/p>\n<p>HypeDrop Later <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/HypeDrop\/status\/1683116036860567552\">updates<\/a> users status,<\/p>\n<blockquote>\n<p>\u201cPlease know that your HypeDrop funds are safe, but we encountered an issue on the cryptocurrency provider&#8217;s side.<\/p>\n<p>Once the provider&#8217;s operations resume, processing deposits will be credited accordingly.\u201d<\/p>\n<\/blockquote>\n<p>The attacked wallet, known as Alphapo.eth, had its funds converted into Ethereum (ETH) by the hackers.  The funds were then routed through different channels, including Avalanche and Bitcoin.  Evidence from the Etherscan transaction records points to a consistent outflow of funds from the Alphapo.eth wallet.  Initial estimates put the value of the stolen tokens to be in the region of $31 million.<\/p>\n<p>The attacker or attackers involved in the incident are reportedly associated with the addresses &#8216;0x6d2e8,&#8217; &#8216;0x040a9,&#8217; &#8216;TDoNAZ,&#8217; and &#8216;TKSitn.&#8217;<\/p>\n<p>The consensus among the cybersecurity community is that the investigation into the Alphapo incident is still ongoing.<\/p>\n<p>Preliminary indications from De.Fi suggest that private key leakage could be a potential cause of the breach.<\/p>\n<p>The exact amount of stolen Bitcoin remains unconfirmed outside of De.Fi and ZachXBT&#8217;s projections.  However, over $60 million has been discovered as of press time.<\/p>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Alphapo, a cryptocurrency payment service provider, reportedly suffered a significant security breach within its hot wallet, resulting in a loss of over $60 million, with some reports suggesting total losses could amount to around $100 million, according to De.Fithe web3 antivirus company. The original hack was discovered on July 23 by blockchain investigator, ZachXBT, who [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":127144,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[274,273,272,244,266,271,268,270,269,267],"class_list":["post-127143","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-de-fi","tag-crypto-finance","tag-decentralized-finance","tag-liquidity","tag-metamask","tag-pancake","tag-slippage","tag-sushiswap","tag-tronlink","tag-trust-wallet","tag-uniswap"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/127143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=127143"}],"version-history":[{"count":1,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/127143\/revisions"}],"predecessor-version":[{"id":127145,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/127143\/revisions\/127145"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/127144"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=127143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=127143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=127143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}