Online casino platform MetaWin is the latest victim in a string of cyberattacks plaguing the crypto industry. On November 3, MetaWin reported an exploit that drained approximately $4 million from the platform\u2019s hot wallets. According to the casino\u2019s CEO, Skel, withdrawals were temporarily halted, but most of the platform\u2019s funds have been restored, with 95% of customer withdrawals re-enabled as of the latest update.<\/p>\n\n\n\n
The breach exploited MetaWin\u2019s frictionless withdrawal system, allowing the attacker to siphon funds directly from the casino\u2019s hot wallets, which are wallets connected to the internet for quicker transactions but more susceptible to hacks. Following the incident, blockchain analyst ZachXBT uncovered that the hacker transferred the stolen funds to cryptocurrency exchanges KuCoin and HitBTC using a nested service, spreading the funds across over 115 crypto addresses to obscure their trail.<\/p>\n\n\n\n
The attacker\u2019s identity and motives remain unclear, and MetaWin has not yet responded to public requests for additional information.<\/p>\n\n\n\n
The MetaWin hack follows a particularly challenging October for the crypto world, with a reported $129 million lost to scams and exploits, according to cybersecurity firm CertiK. The month saw major incidents affecting prominent platforms:<\/p>\n\n\n\n
On October 16, lending platform Radiant Capital experienced a $58 million hack after an attacker gained access to private keys for the platform\u2019s multi-signature wallet. This access allowed the hacker to control Radiant\u2019s smart contracts on the BNB Chain and Arbitrum network, draining the platform\u2019s assets.<\/p>\n\n\n\n
In another October incident, several decentralized apps (dApps), including 1inch and TEN Finance, fell victim to a phishing scheme exploiting the Lottie Player animation library. The attackers embedded deceptive links within the animation interface, luring users to connect their wallets. Once connected, wallets were quickly drained using the \u201cAce Drainer\u201d phishing software, which has gained notoriety in the crypto space for its effectiveness in stealing funds.<\/p>\n\n\n\n
Just days before the MetaWin breach, the crypto exchange M2 lost $13 million after its hot wallets were compromised. Similar to MetaWin, M2\u2019s security issue stemmed from the vulnerabilities associated with hot wallets, which, although convenient for transactions, are prone to remote exploitation.<\/p>\n\n\n\n
The recent surge in attacks on hot wallets underscores the need for platforms to reevaluate their security strategies. While these wallets facilitate instant transactions, they remain vulnerable to cyberattacks, exposing platforms to significant financial risk. Cybersecurity firms have emphasized the importance of cold wallets\u2014offline wallets not connected to the internet\u2014for secure asset storage, especially for long-term holdings.<\/p>\n\n\n\n
As cybercriminals continue to target crypto platforms, the industry faces mounting pressure to bolster its defenses. October\u2019s spate of cyber incidents highlights not only the need for tighter security on high-risk components like hot wallets but also the importance of educating users about phishing threats and the risks associated with signing unknown transactions.<\/p>\n\n\n\n
With security concerns mounting, the recent MetaWin hack and the events of October serve as stark reminders that cryptocurrency platforms must prioritize robust cybersecurity to protect their users and assets from increasingly sophisticated attacks.<\/p>\n","protected":false},"excerpt":{"rendered":"
Recent Hack on MetaWin Casino Adds to October’s Soaring Crypto Losses Online casino platform MetaWin is the latest victim in a string of cyberattacks plaguing the crypto industry. On November 3, MetaWin reported an exploit that drained approximately $4 million from the platform\u2019s hot wallets. According to the casino\u2019s CEO, Skel, withdrawals were temporarily halted, […]<\/p>\n","protected":false},"author":6,"featured_media":1863,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[43],"tags":[459],"class_list":{"0":"post-12125","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-general-news","8":"tag-pp"},"acf":[],"yoast_head":"\n