The community crowdfunding wallet lost 2,675 XMR worth nearly $460,000 in the attack, but the cause of the vulnerability has not yet been determined.
Posted on November 6, 2023 at 1:04 AM ET.
The developer of Monero, a privacy-enhancing blockchain, has reported a breach of its Community Crowdfunding System (CCS) wallet, resulting in the depletion of its entire balance.
In Github disclosure On Thursday, the pseudonymous Monero developer Luigi informed the community that 2,675.73 XMR, worth approximately $460,000 as of this writing, was ejected just before midnight on September 1st.
CCS Wallet funds the proposal and development of the Monero protocol, with all funds donated by individuals and organizations to further its cause. The wallet was founded in April 2020 by Luigi and another Monero maintainer, Riccardo Spagni, known by the pseudonym “Fluffypony,” according to a timeline shared by Luigi.
In August 2021, Fluffy Pony was arrested in Tennessee on non-cryptocurrency-related charges and was charged with stealing approximately $100,000 from a former employee. After Luigi was arrested, he took over control of the CCS wallet, and as of late September, the majority of the funds were stored in the CCS wallet and some in a hot wallet (the balance remained unchanged).
“I no longer have access to those wallets (though I do have a large corporate/financial wallet on that laptop that has remained untouched since before Monero hardware wallets were supported). But similar precautions We have plans in place,” Fluffypony commented. Accident report.
“This attack is unconscionable because they deprived contributors of funds they may have relied on to pay rent or buy food. Once they are aware of this, they will take action to rectify this. I urge you to wake up,” he added.
a after death An investigation into the incident by Moonstone Research revealed that the attacker wiped out the wallet in nine transactions, suggesting that the attacker was likely a Monerujo wallet user who had enabled the PocketChange feature. .