The crypto industry’s latest causality occurred over the weekend as nearly $35 million worth of various tokens were stolen from Atomic Wallet, a centralized storage and wallet service.
These tokens included bitcoin (BTC), ether (ETH), tether (USDT), dogecoin (DOGE), litecoin (LTC), BNB coin (BNB) and polygon (MATIC). Tron-based USDT seemed to be the largest stolen stash, on-chain analytics cited by blockchain sleuth ZachXBT showed.
Security audit company Least Authority warned in a blog post in 2022 that funds in Atomic Wallet may have been at risk.
In a tweet on Monday, Atomic Wallet said the impacted users represented “less than 1% of our monthly active users,” with the last drained transaction occurring on Saturday.
The firm previously said it was investigating and analyzing the attack. It had not released specifics of the attacks as of Monday morning.
Victims have been asked to submit information on a Google Docs form that Atomic Wallet is using to conduct its investigations.
Several users report that their crypto was stolen after a recent software update, while others say they were impacted despite not updating to the latest version, messages from Atomic Wallet’s official Telegram channel viewed by CoinDesk show.
UPDATE (June 5, 2023, 20:50 UTC): Adds context about Least Authority warning.
CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk offers all employees above a certain salary threshold, including journalists, stock options in the Bullish group as part of their compensation.