Cryptsy Hack

Reported loss $9.9M
Bitcoin Litecoin
Access Control

What happened

Quick Summary

Cryptsy lost 13,000 BTC and 300,000 LTC due to an IRC backdoor in the code of the Lucky7Coin wallet.

Details of the Exploit

The developer of Lucky7Coin had inserted an IRC backdoor into the wallet's code, which functioned as a Trojan or command and control unit. This Trojan had likely been present for several months, gathering enough information to execute the attack. Cryptsy was alerted of a decrease in their safe/cold wallet balances of Bitcoin and Litecoin, as well as a few other minor cryptocurrencies, leading to the discovery of the exploit.

Block Data Reference

The transactions made by the attacker can be found at the following link:

Source

Protocol details

Classification CeFi / Key Compromise
Protocol Type Exploit/Access control
Protocol links Website

Evidence

Understand the attack patterns

Compare incidents →
Access Control Attacks

Same attack technique

Browse all hacks →
BNB Chain FinNexus $7.0M lost Bitcoin Shapeshift $230K lost Bitcoin Kipcoin $728K lost Bitcoin BTER $1.8M lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes