Bitcoin Hacks

Stake Hack Results in $41 Million Loss, Contradicts Security Expectations

Stake, a leading crypto casino, loses $41 million in a sophisticated hack targeting its hot wallet. Founder insists private keys remain secure.
By
Colin Aulds
tooltip author photo

Colin Aulds is a founder at 10NetZero, a off-grid Bitcoin mining company. He is also the former VP and founder at Billfodl, a Bitcoin wallet backup company, as well as PrivacyPros.io, a blog dedicated to helping every day people increase their privacy online. He earned his Bachelor of Business Administration from Belmont University in 2011.

Learn more about our editorial guidelines

      September 6, 2023

Stake Hack Results in $41 Million Loss, Contradicts Security Expectations

Stake, a front-running crypto casino, has reported a substantial financial loss due to a hacking incident that led to a $41 million shortfall. The breach specifically targeted a hot wallet used for facilitating customer deposits and withdrawals, according to Edward Craven, the co-founder of Stake.

Key Takeaways

  • Stake, a crypto casino, faced a $41 million loss due to a hacking incident targeting a hot wallet.
  • The hack was a 'sophisticated breach' focusing on a service for blockchain transaction authorization, not the private keys.
  • After the incident, Stake temporarily suspended deposits and withdrawals but has since resumed, assuring users that their funds are secure.

Founder’s Remarks

Contrary to initial speculations that private keys were compromised, Craven clarified that the hack was a “sophisticated breach” which focused on a service responsible for authorizing blockchain transactions. He insisted that the private keys remained secure throughout the ordeal.

Recovery Measures

In the immediate aftermath of the hack, Stake took precautionary steps by temporarily suspending deposits and withdrawals. These features have since been reinstated, with Craven confirming that Stake is fully operational and user funds are secure. He also mentioned that the company is in the midst of enhancing the security of its wallet systems.

Expert Opinions

Security experts initially pointed to compromised private keys as the most likely culprit for the unauthorized withdrawals. However, the absence of typical hacker tactics such as front-running has left them reconsidering their initial assessment. The exact nature of the breach remains an ongoing subject of investigation, hinting at a potentially more complex situation than first thought.

Given the rapid evolution and inherent risks associated with the crypto industry, this incident serves as a stark reminder of the potential vulnerabilities that can plague even established platforms.

North Korea Behind Attack

It is now widely believed that North Korean stat-sponsored hacking group Lazerus was behind the attack. Funds stolen would likely be used to fund North Korea’s nuclear weapons program.

Article Sources

BuyBitcoinWorldWide writers are subject matter experts and base their articles on firsthand information, like interviews with experts, whitepapers or original studies and experience. We also use trusted research and studies from other well-known sources. You can learn more about our editorial guidelines.

  1. DL News - Stake co-founder says wallet keys ‘not compromised’ in crypto casino’s $41m hack, https://www.dlnews.com/articles/defi/stake-co-founder-says-hacker-did-not-compromise-private-keys/
  2. NY Post - North Korean hackers stole $41M in crypto from online casino to fund nuclear program: FBI , https://nypost.com/2023/09/08/north-korean-hackers-stole-41-million-in-crypto-to-fund-casino/
  3. Financial Review - More than $60m stolen from Young Rich Lister’s crypto casino, https://www.afr.com/technology/more-than-60m-stolen-from-young-rich-lister-s-crypto-casino-20230905-p5e22q

About the Author

colin aulds

Colin Aulds is a founder at 10NetZero, an off-grid Bitcoin mining company. He is the former VP and founder at Billfodl, a Bitcoin wallet backup company, as well as PrivacyPros, a blog dedicated to helping every day people improve their privacy. He also runs the popular Unhashed Podcast. Colin holds a bachelors degree from Belmont University (BBA).