CoinStats Hack

TOTAL LOST $2.0M
Medium Phishing Attacks

What happened

Quick Summary

Jun-22-2024 CoinStats portfolio tracker was hacked and after using a phishing link users have lost about 2M USD.

Details of the Exploit

Cryptocurrency portfolio manager CoinStats was hacked on Friday, resulting in the theft of over $2 million from 1,590 wallets. The platform shut down its application to mitigate the attack. Wallets created within CoinStats were affected, while connected wallets and CEXes remained secure.

Some impacted users received phishing messages that directed them to a malicious website. CoinStats CEO Narek Gevorgyan confirmed $800,000 was stolen from two wallets that imported their seed phrases to CoinStats Wallet. Evidence suggests the North Korean Lazarus Group was behind the attack.

CoinStats resumed operations on Monday with limited functionalities. Users with affected wallets were advised to move their funds immediately. The platform emphasized that only read-only access is required for connected wallets, ensuring their funds are not at risk.

Block Data Reference

Example of tx:

https://etherscan.io/tx/0x8d036063…745e57

Case & protocol details

Classification Other
Protocol Type Exploit/Phishing
Official Website coinstats.app/
Protocol Twitter/X @CoinStats

Evidence & learning

Attack pattern

Compare incidents →
Phishing Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Whale Wallet Drain $25.6M
USDC Permit Signature Phishing $1.8M
Social Engineering Scam $282M
Address Poisoning Attack $50.0M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes