Monero’s community wallet loses all funds after attack

A security breach has resulted in the loss of 2,675.73 XMR from Monero's community crowdfunding wallet. The cause and source of the breach remain unidentified.

A recent attack compromised Monero’s community crowdfunding wallet, wiping out its entire balance of 2,675.73 Monero (XMR), worth nearly $460,000.

The incident took place on Sept. 1 but was only disclosed on GitHub on Nov. 2 by Monero’s developer Luigi. According to him, the source of the breach has not been identified yet.

"The CCS Wallet was drained of 2,675.73 XMR (the entire balance) on September 1, 2023, just before midnight. The hot wallet, used for payments to contributors, is untouched; its balance is ~244 XMR. We have thus far not been able to ascertain the source of the breach."

Monero’s Community Crowdfunding System (CCS) funds development proposals from its members. “This attack is unconscionable, as they’ve taken funds that a contributor might be relying on to pay their rent or buy food,” noted in the thread Monero's developer Ricardo "Fluffypony" Spagni.

Luigi and Spagni were the only two people who had access to the wallet seed phrase. According to Luigi's post, the CCS wallet was set up on an Ubuntu system in 2020, alongside a Monero node.

To make payments to community members, Luigi used a hot wallet that has been on a Windows 10 Pro desktop since 2017. As needed, the hot wallet was funded by the CCS wallet. On Sept. 1, however, the CCS wallet was swept in nine transactions. Monero's core team is calling for the General Fund to cover its current liabilities.

"It's entirely possible that it's related to the ongoing attacks that we've seen since April, as they include a variety of compromised keys (including Bitcoin wallet.dats, seeds generated with all manner of hardware and software, Ethereum pre-sale wallets, etc.) and include XMR that's been swept," Spagni noted in the thread.

According to other developers, the breach could have originated from the wallet keys being available online on the Ubuntu server.

"I wouldn't be surprised if Luigi's Windows machine was already part of some undetected botnet and its operators performed this attack via SSH session details on that machine (by either stealing the SSH key or live using trojan's remote desktop control capability while the victim was unaware). Compromised developers' Windows machines resulting into big corporate breaches is not something uncommon," noted pseudonymous developer Marcovelon.

Magazine: Slumdog billionaire — Incredible rags-to-riches tale of Polygon’s Sandeep Nailwal

Comments

Post a Comment

Popular posts from this blog

CleanSpark’s Bitcoin mining capacity hits 8 EH/s as new facility goes live

Image
The Bitcoin mining company kicked off the second phase of its mining campus in Georgia, gearing up for the next Bitcoin halving. Bitcoin miner CleanSpark has begun the second phase of operations at its mining campus in Washington, a city in the U.S. state of Georgia, reaching 8.0 exahashes per second (EH/s), halfway to its year-end target of 16 EH/s.  The second phase saw an investment of nearly $55 million in the site, including construction, infrastructure and machines. The facility , bought in August 2022 for $25.1 million, had 15,000 mining machines with a power capacity of 50 megawatts (MW). According to the company, the capital deployed expands its total power capacity to 86 MW. “Today, it’s 50 megawatts of new power added on to the 36 megawatts we previously had constructed there. So, there’s 86 megawatts, or 12 times the load provided by the city," said Matthew Schultz, CleanSpark’s executive chairman, during an investors' conference on July 13. According to Schu...
Read more

Tether bitcoin mine branded 'fake' after X users spot edited logos

Image
A recent tweet from Tether CTO Paolo Ardoino in which he claims work on one of the company’s new sustainable bitcoin mining projects is “coming along well” has given rise to a curious new conspiracy theory. The tweet featured what at first glance looked to be an innocuous image of a number of shipping containers that had apparently been converted hold crypto miners. However, it didn’t take eagle-eyed viewers long to spot that something wasn’t quite right — namely that the Tether logos on the side of the containers looked Photoshopped. This led to speculation that not only were the logos fake, but the site itself was a fabrication . One of #Tether energy production and #Bitcoin mining sites coming along well. pic.twitter.com/6Z8o6A5OaE — Paolo Ardoino (@paoloardoino) August 24, 2023 “Is this a real Mining site owned by Tether ? Tether ’s logo looks poorly photoshopped, there. What’s going on?” wrote one, while another said, “lol you really trying to pass that off as...
Read more

Is Solana a Good Investment?

Image
Is Solana a Good Investment in the Crypto Market? ‍With the increasing popularity of cryptocurrencies, investors are constantly seeking opportunities to maximize their returns. Solana (SOL) has emerged as one of the most promising projects in the crypto market, known for its scalability, speed, and low transaction fees. In this article, we will conduct a comprehensive analysis to determine whether Solana is a good investment option for both short-term and long-term investors. Also read: Bitcoin: South Korean Lender Delio Plans To Sue Authorities Understanding Solana and its Potential Solana is a blockchain platform that aims to provide a fast and efficient infrastructure for decentralized applications (dApps) and digital assets. It differentiates itself through its unique consensus mechanism, Proof of History (PoH), which enables the network to process thousands of transactions per second. With its high throughput and low fees, Solana has gained significant attention ...
Read more