Coinsbuy was hacked for $8 million in a coordinated attack affecting TRON and Ethereum networks on August 9, with details emerging from blockchain investigations.
Coinsbuy, a cryptocurrency platform, was hit by a significant hack on August 9, resulting in a loss of approximately $8.07 million across the TRON and Ethereum networks, according to blockchain analysts at BlockWatchdog.
The incident commenced with a trial transaction of 5 USDT on TRON. In just under an hour, hackers withdrew 6.04 million USDT from eight different wallets. Notably, the largest single transaction reached around 3.5 million USDT.
Concurrently, the attackers targeted three Ethereum addresses, draining them of 1.89 million USDT and 77 ETH. The stolen crypto was quickly converted into 981.1 ETH using the 1inch platform via a newly created wallet.
Investigation revealed that both aspects of the attack were interconnected, utilizing the cross-chain service Bridgers. The Ethereum payout contract guided the funds into a swap wallet, matching the timing and amount of the attacks, leading experts to believe this was part of a coordinated effort.
Of the stolen funds, 79% were funneled through the FixedFloat exchange, involving around 50 temporary addresses. Following the attack, the ChangeNOW service froze 150 ETH, valued at about $288,000, while an additional 282 ETH, worth approximately $542,000, remains untouched across five different addresses.
While the exact method of the attack has yet to be clarified and Coinsbuy has not issued a public statement, reports indicate that within 24 hours, the platform had replenished the hacked wallets, transferring 3.93 million USDT back to the original addresses. This action closely mirrored the amounts stolen, with variations of only 0.05%.
“The money is still there. This only makes sense if the team does not believe there has been a leak of private keys,” experts noted, pointing out the unusual nature of refilling hacked wallets with such substantial amounts shortly after the theft.
Initially estimated at $7.9 million, the losses were later reassessed to $8,073,992 based on detailed transaction analysis.
It is also noteworthy that just days prior, on July 31, Coldcard hardware wallet owners had experienced a theft of 594.48 BTC, valued at approximately $38.2 million. Subsequently, the cumulative losses from related attacks escalated to over $89 million.
