What happened
On December 31, 2022, more than 200 BTC left Bitcoin Core developer Luke Dashjr's wallet after he reported a compromised PGP key. A forensic analysis links the wider incident to unauthorized access to his Linux server and multiple backdoors, and says his workstation was likely also compromised. The available evidence does not establish the initial infection vector.
How it happened
- An unauthorized party accessed Dashjr's Linux server before the theft.
- Forensic reporting identified multiple Linux backdoors in the environment.
- Dashjr later reported his PGP key compromised and cryptocurrency stolen.
- More than 200 BTC left his wallet in four transactions on December 31.
Protocol details
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
