Online Casino MetaWin hacked for $4 million — ZackXBT

As a seasoned researcher who has witnessed the rollercoaster ride that is the crypto world, I can’t help but feel a mix of dismay and intrigue upon reading about yet another major cybersecurity attack. The MetaWin hack, with its staggering $4 million loss, is just the latest chapter in this ongoing digital drama.


On November 3, the online gambling site MetaWin experienced a security breach, resulting in about $4 million being stolen from the platform’s funds. However, the CEO has confirmed that the missing funds have been replenished following the incident.

As reported by Skel, the CEO of MetaWin, an unauthorized individual gained access to MetaWin’s hot wallets through their smooth withdrawal system, causing the platform to temporarily halt all withdrawals. At the time of this report, Skel noted that 95% of the platform’s customers were able to resume making withdrawals.

As a diligent researcher delving into the intricacies of blockchain, I uncovered an interesting piece of information: the perpetrator transferred the ill-gotten funds to both Kucoin and a HitBTC subservient platform. In my investigation, I was able to identify over 115 addresses that are linked to the malicious actor.

Currently, we don’t have any information about who is responsible for the hack or their reasons. We attempted to get a statement from MetaWin, but they didn’t respond before our article went live.

Online Casino MetaWin hacked for $4 million — ZackXBT

The most recent hacks and losses

In simpler terms, the MetaWin hack represents just the most recent instance of cyber threats in the cryptocurrency sector. On October 16th, the lending platform Radiant Capital suffered a theft amounting to $58 million when an unscrupulous individual managed to infiltrate several private keys essential for authorizing transactions from Radiant’s multi-signature wallet.

As a researcher delving into this incident, I discovered that an unauthorized party successfully gained access to the private keys, thereby seizing control over the Radiant smart contracts deployed on both the Binance Smart Chain (BNB) and Arbitrum networks. Consequently, this intruder was able to execute transactions and transfer the funds into their own possession.

On October 30, several decentralized apps suffered a highly advanced phishing attack, which infiltrated the widely-used Lottie Player animation library found on numerous websites and technology companies.

Utilizing the Lottie animation library, cyber attackers showcased harmful phishing URLs within apparently innocent components across various web pages, including those of 1inch, TEN Finance, among others.

Users who unwittingly clicked on fake links found themselves led to a process where they linked their digital wallets, only for these wallets to be emptied through the notorious “Ace Drainer” scam software.

Lately, the M2 trading platform experienced a hack worth approximately $13 million, similar to the Metawin exploit. The hot wallets of the M2 exchange, which are online and accessible remotely by individuals with sufficient technical expertise, were compromised in this incident.

Read More

2024-11-03 23:44