Altcoins Talks - Cryptocurrency Forum

Further Discussions => Reputation, Scams & Phishing => Topic started by: Husires on July 10, 2024, 05:18:02 PM

Title: CoinStats exploiter moves almost $1M to Tornado Cash
Post by: Husires on July 10, 2024, 05:18:02 PM
Blockchain security firm CertiK flagged that two wallets linked to the CoinStats exploit in June have transferred 311 ETH, worth about $959,000, to Tornado Cash. One wallet moved 211 Ether while the other sent 100 ETH to the crypto mixer.

(https://s3.cointelegraph.com/uploads/2024-07/eec055b2-888d-4ac4-b4d9-bc9c5519547a.jfif)

Quote
On June 22, crypto portfolio manager CoinStats suspended user activity following a breach that affected 1,590 crypto wallets. The company announced that it had shut down the application to “isolate the security incident.”

The firm said the attack had been mitigated and noted that “none of the connected wallets and CEXes were impacted.” The company urged affected users to move their funds using their exported private keys.

The reason why customers lost their money is that one of the employees who was socially engineered into downloading malicious software then connected to the service only to be stopped later. It seems that tracking will be more difficult due to their use of the mixing service.

https://cointelegraph.com/news/coinstats-hack-1m-eth-transferred-tornado-cash
Title: Re: CoinStats exploiter moves almost $1M to Tornado Cash
Post by: notblox1 on July 25, 2024, 07:30:12 PM
Wait a minute I thought that Tornado Cash is dead and not working anymore after developers was arrested  :o
CoinStats is now back working but I dont understand why they hold so much coins, they are not exchange, bank or big business.
Title: Re: CoinStats exploiter moves almost $1M to Tornado Cash
Post by: Husires on July 25, 2024, 08:33:30 PM
Wait a minute I thought that Tornado Cash is dead and not working anymore after developers was arrested  :o
Tornado Cash is non-custodial, smart contract software, the developer was arrested and the domain and GitHub accounts were blocked, but the code exists and can be hosted on any domain and start ethereum mixer.
A million dollars is not a large amount if the service is successful, but it is difficult to regain trust in the service.
Title: Re: CoinStats exploiter moves almost $1M to Tornado Cash
Post by: notblox1 on July 26, 2024, 09:43:20 PM
Tornado Cash is non-custodial, smart contract software, the developer was arrested and the domain and GitHub accounts were blocked, but the code exists and can be hosted on any domain and start ethereum mixer.
A million dollars is not a large amount if the service is successful, but it is difficult to regain trust in the service.
And who is operating that Tornado code and making updates after developers was sent to prison?
It is not hard for scammers to use the same code to take money from people with scam websites, and I dont know any trusted websites that operate Tornado code for ethereum mixing.
Title: Re: CoinStats exploiter moves almost $1M to Tornado Cash
Post by: Husires on July 27, 2024, 09:36:54 AM
Tornado Cash is non-custodial, smart contract software, the developer was arrested and the domain and GitHub accounts were blocked, but the code exists and can be hosted on any domain and start ethereum mixer.
A million dollars is not a large amount if the service is successful, but it is difficult to regain trust in the service.
And who is operating that Tornado code and making updates after developers was sent to prison?
It is not hard for scammers to use the same code to take money from people with scam websites, and I dont know any trusted websites that operate Tornado code for ethereum mixing.
They locally set up IPFS node and accessible Tornado Cash App using IPFS link or manually configuring an endpoint .
I don't want to put links that might be banned but search for IPFS node with TC (I don't recommend this and you might get scammed)
Title: Re: CoinStats exploiter moves almost $1M to Tornado Cash
Post by: Stompix on July 27, 2024, 04:22:41 PM
And who is operating that Tornado code and making updates after developers was sent to prison?
It is not hard for scammers to use the same code to take money from people with scam websites, and I dont know any trusted websites that operate Tornado code for ethereum mixing.

There is no website needed and there never was, TornadoCash is truly decentralized, you can't take down the mixer on the Ethereum chain unless you have a fork for the entire blockchain and invalidate the smartcontract, which obviously is not going to happen.
So,  basically TC can never be stopped or seized or anything, but they can still track the coins going in.
Title: Re: CoinStats exploiter moves almost $1M to Tornado Cash
Post by: notblox1 on July 29, 2024, 08:25:13 PM
They locally set up IPFS node and accessible Tornado Cash App using IPFS link or manually configuring an endpoint .
I don't want to put links that might be banned but search for IPFS node with TC (I don't recommend this and you might get scammed)
This is not bitcointalk forum, you can post all links with mixers and websites with more information about it, this is not going to get you banned.
I dont want to use Tornado for mixing coins but I want to see how it was possible to move so much money in and out of Tornado.
I didnt hear any advertisement or promotion about that.