Internet Security Blog - Hackology

NiceHash Hacked, $50 Million Stolen

Update: $64 Million worth of Bitcoins have been stolen , 4,700 Bitcoin to be exact and the highly professional and sophisticated attack made use of Social Engineering on Admin Users of NiceHash website.

Reports on Twitter, Reddit, and Bitcointalk have miners worried as it seems NiceHash has been hacked

There are some posts by people saying that NiceHash transferred all of the BTC sitting in miners’ wallets into a single wallet before NH fully went down. That’s not worrying or is it ?.

NiceHash Website Maintenance Message as the Website has been compromised

If NiceHash were hacked, then it makes sense that the hacker pushed all of the Bitcoin into a single wallet and then transferred it to their own wallet. There’s no way of getting it back if that’s the case, and if that is indeed the case, there’s no way NiceHash can restore money to miners’ wallets. We are talking about $50 million or more, it’s going to hurt many people. NiceHash CEO Marko Kobal, who said that NiceHash is “assessing the situation and working with the authorities. We’ll have a public statement shortly“. That isn’t a good sign at all.

NiceHash has just placed a public statement on Reddit stating :

Unfortunately, there has been a security breach involving NiceHash website. We are currently investigating the nature of the incident and, as a result, we are stopping all operations for the next 24 hours.
Importantly, our payment system was compromised and the contents of the NiceHash Bitcoin wallet have been stolen. We are working to verify the precise number of BTC taken.
Clearly, this is a matter of deep concern and we are working hard to rectify the matter in the coming days. In addition to undertaking our own investigation, the incident has been reported to the relevant authorities and law enforcement and we are co-operating with them as a matter of urgency.
We are fully committed to restoring the NiceHash service with the highest security measures at the earliest opportunity.

We would not exist without our devoted buyers and miners all around the globe. We understand that you will have a lot of questions, and we ask for patience and understanding while we investigate the causes and find the appropriate solutions for the future of the service. We will endeavour to update you at regular intervals.

While the full scope of what happened is not yet known, we recommend, as a precaution, that you change your online passwords.

We are truly sorry for any inconvenience that this may have caused and are committing every resource towards solving this issue as soon as possible.

The above statement also indicates that something horrible has happened as their mining pools have also been closed although the above press release says 24 hours but I think it will be down for long, bad day for NiceHash and all those who had their Crypto inside NiceHash

Add comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Get Wise

Subscribe to my newsletter to get latest InfoSec / Hacking News (1 Email/week)
Utopia p2p Ecosystem