Algo Capital, an investment firm focused on the Algorand blockchain, lost a few million dollars in USDT and ALGO tokens after its chief technology officer's phone was breached, CoinDesk has learned.
According to a source familiar with the matter, Algo Capital reported to its limited partners Friday that Pablo Yabo, its CTO, had his mobile phone compromised, which allowed attackers to seize control of an Algo hot wallet he administered. As a result of the breach, roughly $1 million to $2 million in the cryptocurrencies were taken, according to an email from CEO David Garcia seen by CoinDesk.
"Yes, there was a security breach," Garcia told CoinDesk in an email. "We communicated to all the Algo Capital VC Fund Limited Partners and updated them about the incident."
The network itself remains unscathed. The Algorand team is aware of the breach suffered by the investment firm, the source said.
Algo Capital has raised $200 million for its Algo VC Fund, with the cash intended to support projects in the Algorand economy. Algo Capital founder and managing partner Arul Murugan said in an August 2019 statement that:
The investment firm is a separate entity from the Algorand Foundation and Algorand LLC, which oversee the blockchain's actual development. Pablo Yabo has resigned his position, according to the email sent to partners. Further security measures have been taken by the firm. The majority of the firm's funds were held in cold wallets that were not compromised.
The firm is taking full responsibility for the loss and committed to reimbursing the full amount within 20 months. "We are engaging with certain key organizations and security services to collaborate and address this issue which has become a common industry problem," Garcia wrote.
The Algorand blockchain itself was first envisioned by MIT professor Silvio Micali in 2017 as a possible solution to the scaling issues other blockchains face. Under its consensus mechanism, the network randomly selects the machines which add the next blocks to the blockchain, as a variant of the proof-of-stake mechanism.
UPDATE (Oct. 7, 01:40 UTC): Yabo pledged in a Medium post published Sunday to shoulder most of the reimbursement cost, writing:
Yabo also confirmed his departure from Algo Capital in the post. "I have decided to focus entirely on Randlabs.io to do what I love most: build tools and software that increases the adoption of blockchain technology," he wrote.
Broken fence image via Shutterstock
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.