Blink has released a full post-mortem on its Sept. 19 security incident, saying the attack led to the theft of 6.61 BTC from 24 customer accounts. According to the company, the vulnerability had existed since October 2023 and could have allowed any user with a free Blink account to gain support-level privileges, take over customer accounts, and raise withdrawal limits. The attacker also obtained partial information from 3,817 accounts, including some phone numbers and email addresses, while names, identity documents, addresses, passwords, and seed phrases were not exposed. Blink said all 24 compromised accounts did not have two-factor authentication enabled. The attacker also made 18 withdrawal attempts from nine accounts protected by two-factor authentication, but none succeeded. Blink shareholders have fully reimbursed all affected customers. The company added that about 5 BTC of the stolen funds was later moved through a cross-chain swap service. Blink is now offering a recovery bounty of up to about 3.3 BTC, with half of any successfully recovered funds to be allocated to those who provide valid leads and to the Bitcoin circular economy.
Blink has published a full post-mortem on its Sept. 19 attack, according to monitoring by Bitcoin News. The incident resulted in the theft of 6.61 BTC from 24 customer accounts.
The company said the vulnerability had been present since October 2023. It said any user with a free Blink account could have used it to obtain support-level privileges, take over customer accounts, and increase withdrawal limits.
The attacker also obtained partial information from 3,817 accounts, including some phone numbers and email addresses. Blink said names, identity documents, addresses, passwords, and seed phrases were not leaked.
All 24 compromised accounts did not have two-factor authentication enabled. The attacker also attempted 18 withdrawals from nine accounts protected by two-factor authentication, but none of those attempts succeeded.
Blink shareholders have fully reimbursed all affected customers. About 5 BTC of the stolen funds was later moved through a cross-chain swap service.
Blink is now offering a recovery bounty of up to about 3.3 BTC. Half of any funds successfully recovered will be allocated to people who provide valid leads and to the Bitcoin circular economy.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
