Online casino platform MetaWin was hit by a significant cyberattack on November 3, 2024, resulting in the theft of approximately $4 million. The breach was executed through the exploitation of MetaWin’s hot wallets, which are part of its frictionless withdrawal system. Following the incident, the platform promptly suspended all withdrawals to prevent further losses. Despite the attack’s impact, CEO Skel announced that the stolen funds have been “topped off,” allowing 95% of customers to resume withdrawals shortly after the breach.
The investigation into the incident was aided by onchain sleuth ZackXBT, who traced the stolen funds to various exchanges, including KuCoin and HitBTC. This detective work uncovered more than 115 addresses associated with the attacker, indicating a potentially sophisticated and organized cybercriminal operation. The nature of the hack raises concerns about the security protocols in place for hot wallets, which are particularly vulnerable due to their internet connectivity.
This hack is part of a troubling trend within the cryptocurrency and online gambling sectors, which have seen an uptick in cyberattacks targeting digital assets. Just weeks prior to the MetaWin incident, the lending platform Radiant Capital suffered a breach resulting in a loss of $58 million due to compromised private keys. Additionally, a phishing attack on October 30 exploited the popular Lottie Player animation library, impacting various decentralized applications and draining users’ wallets through fraudulent links.
As the crypto landscape evolves, so do the tactics employed by cybercriminals. The MetaWin breach serves as a stark reminder for both platforms and users to prioritize security measures, particularly around hot wallets and transaction processes. Increased vigilance and robust security protocols will be essential in safeguarding against future threats, ensuring the integrity of digital financial systems in an increasingly vulnerable environment.
Reference:
