Bitcoin News and Finance
Major Cryptocurrency ATM Manufacturer General Bytes Hacked, Over $1.5M in Bitcoin Stolen Skip to main content

Major Cryptocurrency ATM Manufacturer General Bytes Hacked, Over $1.5M in Bitcoin Stolen

Image
KEBB | Official ₿itcoin News

General Bytes experienced a security incident on March 17 and 18 that enabled a hacker to remotely access the master service interface and send funds from hot wallets, according to the company and sources. The breach forced a majority of U.S.-based crypto automated teller machine (ATM) operators to temporarily shut down. The hacker was able to liquidate 56.28 bitcoins, worth approximately $1.5 million, from about 15 to 20 crypto ATM operators nationwide.

Crypto ATM Operators Temporarily Shut Down After General Bytes Security Breach Enables Hacker to Liquidate $1.5M in Bitcoin and Other Cryptocurrencies

The largest cryptocurrency automated teller machine (ATM) manufacturer, General Bytes, has produced 9,505 such machines globally, with thousands located in the United States. On Saturday, March 18, the company informed the public of a serious security incident that occurred on March 17 as well.

“We released a statement urging customers to take immediate action to protect their personal information,” the company explained at 4:42 p.m. (ET) on Saturday. “We urge all our customers to take immediate action to protect their funds and personal information and carefully read the security bulletin,” the firm added.

General Bytes’ security bulletin said the attacker was able to remotely upload their own Java application using the master service interface, which is typically used by terminals to upload videos. The attacker had access to BATM user privileges and was also able to access the database, read and decrypt API keys used to access funds in hot wallets and exchanges. In addition, the hacker could download usernames, access their password hashes, turn off 2FA, and send funds from hot wallets.

Bitcoin.com News spoke with a U.S.-based cryptocurrency automated teller machine (ATM) operator who confirmed that all U.S. operators using General Bytes machines were shut down nationwide for the evening. The operator also mentioned that servers would have to be rebuilt from the ground up, which can be a lengthy process.

Reportedly, General Bytes is transitioning crypto ATM operators to self-hosted servers. In the security bulletin, General Bytes stated that the company is discontinuing its cloud service. Furthermore, the firm explained that it had conducted multiple security audits since 2021, and none of them had identified this vulnerability.

According to onchain statistics, the hacker siphoned 56.28 bitcoins worth approximately $1.5 million and also liquidated dozens of other cryptocurrencies such as ETH, USDT, BUSD, ADA, DAI, DOGE, SHIB, and TRX. The bitcoin (BTC) address holding the 56.28 BTC has not moved the funds since its last transaction at 3:20 a.m. on March 18. Some digital currencies were transferred to different locations, and a fraction was sent to the decentralized exchange (DEX) platform Uniswap.

General Bytes has experienced issues before, recording a security flaw on August 18, 2022. The attacker at the time leveraged a zero-day attack to “create an admin user remotely via CAS administrative interface via a URL call on the page that is used for the default installation on the server and creating the first administration user.”

As for the March 17 and 18, 2023 hack, General Bytes not only disclosed the addresses used in the attack but also three IP addresses used by the attacker. The source who spoke with Bitcoin.com News on Saturday evening further noted that while their firm’s system was hacked, the company runs a full node that’s “locked down enough” to prevent the attacker from accessing funds.

What do you think about the breach that affected General Bytes? Share your thoughts about this subject in the comments section below.

Labels:

Comments

Post a Comment

Thank you for sharing your thoughts.

Popular posts from this blog

Custodial Lightning Network Service Attack Discovered by LN ‘Newbie’ — Hacker Strikes 6 LN Custodians

KEBB | Official ₿itcoin News
On September 18, a Redditor posted to the r/bitcoin forum and explained how he discovered a way to “attack [the] lightning Network’s custodial services.” The Reddit account dubbed “Reckless Satoshi” wanted to figure out if a “discrepancy between real routing fees and service’s transaction fee can be exploited for a profit.” The researcher disclosed that he wanted to see how large the damage could be and said “it is bad.” 6 Lightning Network Custodial Services Attacked, Researcher Discloses Findings to Offenders Prior to Public Disclosure A Redditor called Reckless Satoshi published a disclosure post on r/bitcoin this past Saturday and disclosed how he had found a vulnerability with routing fees and some of the Lightning Network’s custodial services. The research attack was done in good faith and after it was complete he disclosed the bugs to the offending services before publishing his findings. Reckless Satoshi used the Lightning Network (LN) attack on six different services incl...
Post a Comment
Read more

Axie Infinity Down 40% Since Last Week’s Price High, Protocol Revenue Outshines Competitors

KEBB | Official ₿itcoin News
Last week, the game token leveraged within the Axie Infinity gaming universe skyrocketed to all-time highs, while other crypto markets remained extremely lackluster. During the last seven days, Axie Infinity’s platform token has dropped significantly in value shedding more than 12%. Meanwhile, the game platform’s smooth love potion token has slid over 8% over the last 24 hours. Axie Infinity Down More Than 40% Since All-Time High Not too long ago, the axie infinity (AXS) token was a topical conversation because it reached an all-time high on July 15. At the time, AXS managed to capture $28.93 per unit and since then it has shed 12.8% during the last seven days. The axie infinity (AXS) token is used within the blockchain-based game that involves battles between token-based creatures called “Axies.” AXS is used for the game’s governance system as well as other actions within the game. At the time of writing axie infinity (AXS) is exchanging hands for $16.70 per coin. AXS/USD on Ju...
Post a Comment
Read more

Play-to-Earn Game From Polker (PKR) Exchange Listing – Endorsed by Akon

KEBB | Official ₿itcoin News
The Play-to-Earn NFT based Polker.Game ‘s native token $PKR has been officially listed on the popular centralized exchange BitMart. Polker.game has been in the spotlight recently as Akon, the American R&B superstar and record producer gave his official endorsement of polker stating that the “game is revolutionary” and that Polker is “hands down.. the best play to earn, NFT game in the space.”. With the BitMart listing and celebrity endorsement from Akon, Polker is perfectly positioned to become a major player in the Play-to-Earn league. Watch Akon’s Video Here What is Play-to-Earn? Although not a new concept, play-to-earn has become a trending term due to the popularity of the NFT game AXIE infinity. In the past, previous play-to-earn games have also achieved success – however, thanks to the huge amount of development in the blockchain space in recent years the gaming experience is now massively improved. Play-to-Earn games are essentially free to play and open to anyone and...
Post a Comment
Read more

China to Crack Down on Copyright Infringement Through NFTs

KEBB | Official ₿itcoin News
Authorities in China are going after creators of digital collectibles based on other people’s works of art, the use of which was not authorized. The government offensive is part of a campaign to combat online copyright infringement and piracy with the participation of several departments. Regulators in China Move to Strengthen Copyright Supervision of Online Platforms The National Copyright Administration of China (NCAC) has recently launched a campaign against copyright infringement and piracy on the internet, together with the Ministry of Industry and Information Technology, the Ministry of Public Security, and the State Internet Information Office of the People’s Republic. A major objective of the initiative is to improve copyright supervision of online businesses by investigating cases involving the sale and distribution of infringing products on short video, live broadcast and e-commerce platforms, and promptly dealing with infringing content, the agency announced in a press r...
1 comment
Read more

Trezor and Wasabi to Implement a Coinjoin Mixing Scheme Into Hardware Wallets

KEBB | Official ₿itcoin News
This week, the hardware wallet manufacturer Trezor, and the non-custodial bitcoin wallet with a built-in Coinjoin mixer, Wasabi, revealed the two teams are working together to introduce Coinjoin mixing into hardware wallets. On Sunday, Wasabi tweeted “hardware wallet Coinjoins are coming next year with our friends at [Trezor].” Trezor Says Company Is ‘Working on a Coinjoin Implementation’ According to Trezor and Wasabi , a form of Coinjoin mixing is coming to hardware wallets in the near future. Coinjoin is a privacy-enhancing process that is leveraged to anonymize transfers on a blockchain. Basically, the scheme involves a number of parties transacting together and mixing their unspent transaction outputs (UTXOs) in a pool to obfuscate the origin of all the funds. On Sunday, Wasabi’s official Twitter account tweeted about adding the privacy-enhancing scheme to hardware wallets. In the thread, someone asked Wasabi when they would release an “album,” and Trezor replied : “Hi, we’...
Post a Comment
Read more

Grand Theft Auto 6 to Feature a Fictional Cryptocurrency

KEBB | Official ₿itcoin News
One of the biggest franchises in the videogame industry, Grand Theft Auto, will feature in-game payments of “bitcoin” or another fictional cryptocurrency. Contractors will pay the player with this currency when they need to make anonymous, untraceable payments. This would constitute another push for Bitcoin awareness into mainstream media culture. Grand Theft Auto 6 to Feature in-Game Fictional Cryptocurrency Grand Theft Auto 6, one of the biggest gaming franchises, will feature an in-game cryptocurrency for payments according to insiders. The game will allow the player to accept cryptocurrency payments from big shot contractors who want to remain anonymous. Industry insider Tom Henderson leaked the news on Twitter earlier this week. He stated: I heard recently that in GTA 6, some missions will reward you in bitcoin instead of cash for completing some missions. The stock market feature will return, with the addition of a broker for different cryptocurrencies. If GTA 6 incorporate...
Post a Comment
Read more

Grayscale Considering 25 More Crypto Assets for Investment Products

KEBB | Official ₿itcoin News
Grayscale, the world’s largest crypto asset manager, is considering 25 more crypto assets for investment products. With the latest additions, the company’s list of coins under consideration has grown to 43. “The process of creating an investment product similar to the ones we already offer is a complex, multifaceted process,” said Grayscale. 25 Crypto Assets Added to List of Coins Under Consideration for Grayscale’s Investment Products Grayscale Investments announced Monday that it has updated its list of digital assets under consideration for 2022. Grayscale currently has $30.6 billion in net assets under management. The company explained that the “Assets Under Consideration” list comprises “some digital assets that are not currently included in a Grayscale investment product, but that have come to our attention as part of our exploration of this sector, and that our team has identified as possible candidates for inclusion in a future investment product.” Grayscale detailed: Wit...
Post a Comment
Read more

Cardano’s Cfund First Capital Goes to Israeli Fintech Startup Coti

KEBB | Official ₿itcoin News
This latest move to broaden cooperation between Cardano and Coti builds upon previous collaborations as the former seeks to upgrade its payment solution on top of the former’s expanding financial infrastructure. Strategic Investment Marks First Allocation for New Ecosystem Venture Fund One of the earliest proposed use cases for blockchain was the democratization of financial services, namely by reaching unbanked and underbanked communities worldwide. From remittance payments, access to credit facilities, or even just digital wallet solutions, advancements across the blockchain landscape have finally made this vision a reality. Among them, Coti is developing the enterprise-grade base layer for the rest to build atop of. Coti, which is short for “currency of the internet,” operates a fintech platform that supports stakeholder-driven payment solutions and empowers these stakeholders to digitize any currency. This aim aligns with Cardano’s ambitions of affordably and instantaneously ...
3 comments
Read more
Blogarama - Blog Directory