Leaderboard
563All-time rank
GB

General Bytes

Mar 17, 2023

$1.5M
Lost
$1.5M
Recovered
$0
Net loss
$1.5M
Unrecovered0% recovered

General Bytes' Bitcoin ATM cloud service was compromised through a zero-day vulnerability in the master service interface. Attackers uploaded malicious Java applications to decrypt API keys, accessed hot wallet funds, and stole user credentials by scanning private keys entered at ATMs.

Target
Other
Classification
Frontend & Infrastructure
Technique
Key Leaked via Infrastructure
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Mar 17, 2023
    Exploit executed — $1.5M drained via key leaked via infrastructure
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents