Alphapo, a prominent payment processor for various gambling services, has been hit by a significant security breach. The company reported on July 23, 2023, that their hot wallets had been compromised. The incident resulted in the loss of over $23 million in cryptocurrencies, including Ethereum (ETH), TRON (TRX), and Bitcoin (BTC). However, recent updates suggest that the total amount stolen is far greater than initially reported.
According to a tweet by ZachXBT, a well-known figure in the crypto community, on July 25, 2023, an additional $37 million stolen in TRON and BTC has been located. This revelation brings the total amount stolen from Alphapo’s hot wallets to a $60 million. The exact amount of BTC stolen remains unclear, suggesting that the total figure could be even higher.
The stolen funds were reportedly swapped for ETH and then bridged to other blockchains, including Avalanche and Bitcoin. The addresses involved in the breach include:
- 0x040a96659fd7118259ebcd547771f6ecb9580d17
- 0x6d2e8a20b8afa88d92406d315b67822c01e53c38
- TKSitnfTLVMRbJsF1i2UH5hNUeHLDrXDiY
- TDoNAZHa7WxarUAFbQUhiijTGtd7EpbzRh
- TJF7mdFxDuHB4tb9hoyR4SCpKxk7gr23ym1
Following the security breach, HypeDrop, one of Alphapo’s customers, had to disable withdrawals. In response to a query about the deposit and withdrawal issues, HypeDrop stated, “Our provider is currently working to solve some recent issues from their side, they are facing problems specifically related to withdrawals of BTC, ETH, and TRX, as well as deposits for ETH and TRX.”
The incident has raised serious questions about Alphapo’s security protocols and the potential impact on its clientele. Observers are closely following the situation, with further developments expected as the investigation unfolds. According to ZachXBT, the hack appears to have been carried out by Lazarus, a group known for leaving a distinct fingerprint on-chain.
This incident serves as a stark reminder of the security risks associated with cryptocurrency activities.
Image source: Shutterstock