Blink Published September 19 attack postmortem: 24 accounts compromised 6.61 coins BTC, fully compensated, with a recovery bounty offered
BIBIBI
AT A GLANCE
Blink said the attack caused September 19 the loss of 24 customer accounts totaling 6.61 coins BTC; affected customers were fully compensated.
Article
【Blink publish an attack postmortem and offer the highest bounty 3.3 coins BTC】
Blink published September 19 Complete postmortem of the attack: The attack resulted in 24 customer accounts losing a total of 6.61 coins BTC being stolen. The company stated that the vulnerability had existed since 2023 and that any user with a free October account could use it to obtain customer-service-level permissions, take over customer accounts, and increase withdrawal limits. The attackers also obtained partial information from Blink accounts, including some phone numbers and email addresses; names, identity documents, addresses, passwords, and mnemonic phrases were not exposed. None of the 3817 stolen accounts had two-factor authentication enabled. The attackers attempted 24 withdrawals from 9 accounts protected by two-factor authentication, all unsuccessfully. 18 The shareholders have fully compensated all affected customers. Approximately Blink of the stolen 5 was subsequently transferred through a cross-chain exchange service.BTC A recovery bounty of up to approximately Blink coins 3.3 is now being offered; half of any successfully recovered funds will be allocated to those providing valid leads and to the Bitcoin circular economy.BTC
Key points
01
Blink published an September 19 attack postmortem.
02
Blink said the attack resulted in 24 customer accounts losing a total of 6.61 coins BTC being stolen.
03
The company stated that the vulnerability had existed since 2023 and that users with free October accounts could potentially use it to obtain customer-service-level permissions, take over customer accounts, and increase withdrawal limits.Blink
04
The attackers obtained partial information from 3817 accounts, including some phone numbers and email addresses.
05
Blink said that names, identity documents, addresses, passwords, and mnemonic phrases were not exposed.
06
None of the 24 stolen accounts had two-factor authentication enabled.
07
The attackers attempted withdrawals from 9 accounts protected by two-factor authentication 18 times, all unsuccessfully.
08
Blink The shareholders have fully compensated all affected customers.
09
Approximately 5 of the stolen BTC was subsequently transferred through a cross-chain exchange service.
10
Blink is offering a recovery bounty of up to approximately 3.3 coins BTC, with half of successfully recovered funds allocated to those providing valid leads and to the Bitcoin circular economy.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This incident involved account takeover: the original report stated that attackers could exploit the vulnerability to obtain customer-service-level permissions, then control customer accounts and increase withdrawal limits. The 24 accounts without two-factor authentication enabled suffered asset losses; the 9 accounts protected by two-factor authentication faced 18 withdrawal attempts, all of which failed. Some users’ phone numbers and email addresses were also obtained.
Why it matters to readers
The incident shows that a platform-permissions vulnerability can simultaneously result in asset theft and exposure of users’ contact information. The withdrawal outcomes in the original report also indicate that two-factor authentication prevented withdrawal attempts targeting the relevant accounts in this attack.
If you use Blink account-based services, check whether two-factor authentication is enabled and be alert to suspicious contact that may result from exposure of your phone number or email address. Although affected users were compensated, the original report did not state whether the stolen funds had been recovered.
Risks and unknowns
The material is only a paraphrase of the Blink post-incident review and does not provide Blink the original review content for verification.
The original text does not state whether the vulnerability has been remediated.
The original text does not specify.September 19 The year to which it belongs.
Related Developments
Loading event timeline…
Approximately 5 units transferred via cross-chain exchange services BTC It is unclear whether they have been recovered or frozen.
3817 The original source does not state whether further misuse occurred after partial information from accounts was obtained.
Related concepts
BTC
The abbreviation commonly used for Bitcoin when referring to it as a digital currency.
