The online casino platform MetaWin became the victim of a serious exploit attack on November 3, resulting in damages of approximately 4 million dollars. According to CEO Skel, this amount has been replenished after the attack.
Skel stated that the attacker infiltrated MetaWin's hot wallet through the platform's frictionless withdrawal system, leading to the suspension of all withdrawal transactions. However, the CEO also announced that 95% of the platform's customers had their withdrawal rights restored at the time this article was published.
Detective ZackXBT from Onchain has revealed that the attacker transferred the stolen funds to the Kucoin exchange and an intermediary service of HitBTC. The detective has also identified over 115 addresses related to the attacker.
Source: ZackXBT
Currently, the identity of the hacker and the motive behind the attack remain unclear.
The MetaWin hack is just one of many recent cyber security attacks in the cryptocurrency space. On October 16, the lending platform Radiant Capital was also attacked, losing 58 million dollars when an attacker gained access to the private keys necessary to sign transactions from Radiant's multi-signature wallet. This allowed the hacker to control smart contracts on the BNB Chain and Arbitrum network.
Furthermore, on October 30, several decentralized applications became the target of a sophisticated phishing attack. The attacker infiltrated the Lottie Player animation library, a popular tool used by many websites and tech companies, to display phishing links disguised as seemingly harmless components on websites like 1inch and TEN Finance. Unsuspecting users clicked on these links and were led to connect their wallets, resulting in a loss of funds due to the scam software 'Ace Drainer.'
Recently, the M2 exchange was also exploited, losing 13 million dollars, with a method of attack similar to the MetaWin incident, where the attacker breached the exchange's hot wallet, which is connected to the internet and can be accessed remotely by those with sufficient technical skills.
