Cryptsy Hack

REPORTED LOSS $9.9M
Medium Access Control bitcoin litecoin

What happened

Quick Summary

Cryptsy lost 13,000 BTC and 300,000 LTC due to an IRC backdoor in the code of the Lucky7Coin wallet.

Details of the Exploit

The developer of Lucky7Coin had inserted an IRC backdoor into the wallet's code, which functioned as a Trojan or command and control unit. This Trojan had likely been present for several months, gathering enough information to execute the attack. Cryptsy was alerted of a decrease in their safe/cold wallet balances of Bitcoin and Litecoin, as well as a few other minor cryptocurrencies, leading to the discovery of the exploit.

Block Data Reference

The transactions made by the attacker can be found at the following link:

https://www.walletexplorer.com/wallet/0c07e0bec1002bd2

Case & protocol details

Classification CeFi / Key Compromise
Protocol Type Exploit/Access control
Official Website www.cryptsy.com/

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Humanity Protocol $31.0M
Remilia $6.0M
Mozaic $2.1M
Saga DAO $66K

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes