Crypto exchange Coinbase has said that it prevented little over 1,100 customers from sending bitcoin to Twitter hackers who hijacked high-profile accounts to advertise a bitcoin scam last week.
If Coinbase didn't take the step, these customers would have collectively sent 30.4 bitcoin (currently worth about $278,000) to hackers, the exchange's chief information security officer, Philip Martin, told Forbes. Notably, this amount is more than twice the actual amount ($121,000) that hackers collected via victims.
Despite Coinbase's action, its 14 customers still fell prey to the scam and sent around $3,000 worth of bitcoin to hackers before the exchange blacklisted their addresses, said Martin.
Gemini, Kraken, and Binance users also tried sending bitcoins to the addresses, but not as much as Coinbase's customers, per the report. All these exchanges moved to block the addresses as soon as the scam came to light.
The wide-spread attack took place on Wednesday on Twitter, which saw 130 accounts under its control, including those owned by major figures like Barack Obama, Bill Gates and Elon Musk.
Following the bitcoin
According to blockchain analytics firms, some of the stolen bitcoin has moved to some exchanges and bitcoin mixers like Wasabi Wallet.
"We can see very small amounts going to known, regulated crypto exchanges," Elliptic's co-founder and chief scientist Tom Robinson told The Block. He declined to disclose the names of the exchanges for confidentiality reasons. Robinson further said that 2.89 bitcoin, or 22% of the total amount, was also sent to Wasabi Wallet for mixing purposes.
Another blockchain analytics firm Whitestream told The Block that one of the hackers' addresses has interacted with at least three crypto platforms. "We can see that one address was interacted with addresses that related to several digital currency payment processors --CoinPayments, Coinbase, and BitPay," Itsik Levy, co-founder and CEO of Whitestream told The Block.
Indeed, a BitPay spokesperson confirmed to The Block: "BitPay confirms a purchase occurred at one of its merchants in the amount of $25 in May 2020 from one of the Twitter hacker’s addresses. As part of BitPay’s standard process and procedure, available details are being shared with appropriate parties including law enforcement."
CoinPayments declined to comment to The Block, while Coinbase did not return requests for comment.
Blockchain Intelligence Group, on the other hand, said some of the stolen bitcoin also got sent to Binance.
Indeed, a Binance spokesperson confirmed to The Block that "a small amount of BTC (equivalent to about $10) was sent to a Binance core wallet address. It seems they [hackers] made the move to confuse blockchain researchers."
According to The Block Research, Kraken and Binance-acquired Indian crypto exchange WazirX also received some portion of the stolen bitcoin.
© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.