Stake.com Hot wallet robbed for 40Million + usd (Confirmed by stake)

[rohang]

In the past half hour Stake.com hot wallet was hit for more then 40million usd / 6000 ETH, $3.9 million USDT, $1.1 million USDC, and 900,000 DAI.

UPDATE: Being reported that total amount has reached over 40 million including polygon chains

UPDATE 2 : confirmed by stake

https://twitter.com/Stake/status/1698746766076588057

Stake has disabled ETH and bs/erc20 network transactions



some tweets from  crypto watchdogs/alerts

https://twitter.com/CyversAlerts/status/1698690342113931422

https://twitter.com/peckshield/status/1698697721342042621

6000 ETH transaction to brand new address

https://etherscan.io/tx/0xf7bde3b54f6d6495cb79a8390fbe3e5c5095b0b06c07153c4c7e9c1ddb43645f

IF this is true would it the biggest hack in recent times? The news is all over twitter right now

coindesk article-

https://www.coindesk.com/business/2023/09/04/crypto-casino-stake-targeted-in-reported-40m-exploit

[TryNinja]

A source would be good…

Found this on twitter/x: https://x.com/peckshield/status/1698697721342042621

https://etherscan.io/address/0x3130662aece32f05753d00a7b95c0444150bcd3c

But who says this isn’t them just moving coins around?

[rohang]

A source would be good…

Found this on twitter/x: https://x.com/peckshield/status/1698697721342042621

https://etherscan.io/address/0x3130662aece32f05753d00a7b95c0444150bcd3c

But who says this isn’t them just moving coins around?

yes im adding more info as i have them

IF it was them they wouldnt disable transactions, plus they wouldnt use suspicious method like this

[PX-Z]

Are you an insider? There's nothing related news regarding this yet.
The outgoing transactions might just be changing of a new address.

If this true, this will be one of the largest heist for a casino.

[Wapfika]

There’s a chance that Stake might changing the wallet they are using that’s why they move all their coins out from their wallet and temporarily disable withdrawal and deposit method for preparation for new wallet. Exchange is doing this too when they update their wallet.

But Let’s see if this is really robbed since Eddie will surely made an update regarding this.

[TryNinja]

IF it was them they wouldnt disable transactions, plus they wouldnt use suspicious method like this

What’s suspicious about it? It’s literally an onchain transaction, the actual way of transferring funds?

I guess disabling withdraws + large chunks moving could be seen as suspicious, but that’s also what one would do if they were legitimately moving funds. How do you process deposits and withdrawals after changing wallets? You usually need to change stuff on the background so coins come from (and go to) the new address.

But or course I wouldn’t deposit anything until the rumors are denied. No reason to risk your coins.

[rohang]

Are you an insider? There's nothing related news regarding this yet.
The outgoing transactions might just be changing of a new address.

If this true, this will be one of the largest heist for a casino.

No but there is alot of chatter about this on X and many cryto watchdogs/alerts have tweeted about this suspicious activity

IF it was them they wouldnt disable transactions, plus they wouldnt use suspicious method like this

What’s suspicious about it? It’s literally an onchain transaction, the actual way of transferring funds?

I guess disabling withdraws + large chunks moving could be seen as suspicious, but that’s also what one would do if they were legitimately moving funds. How do you process deposits and withdrawals after changing wallets? You usually need to change stuff on the background so coins come from (and go to) the new address.

But or course I wouldn’t deposit anything until the rumors are denied. No reason to risk your coins.

This is from their hot wallet which is used for customer withdrawals and refilled by stake, emptying the hot wallet like this means 99% a hack/robbery.
IF this was an operation by stake im sure they would inform players in advance that withdraws will be disabled from so and so time

[mk4]

Unless this is confirmed to be an actual hacking and NOT just them moving wallets to a different cold wallet, then we shouldn't be quick to jump conclusions. Exchanges have done this in the past.

If it's true though, then goddamn. Money lost is not that big compared to other hacks, but Stake.com is a platform that's not necessarily catering to crypto peeps.

[Rikafip]

Are you an insider? There's nothing related news regarding this yet.

No official news yet from Stake, but there are already few articles out speculating about alleged hack.

According to ZachXBT, additional $25.6 million were hacked on BSC and Polygon
https://twitter.com/zachxbt/status/1698712407177150729?s=20

[entebah]

look like the the amount hacked increased by 25m on polygon and bsc

[rohang]

Are you an insider? There's nothing related news regarding this yet.

No official news yet from Stake, but there are already few articles out speculating about alleged hack.

According to ZachXBT, additional $25.6 million were hacked on BSC and Polygon
https://twitter.com/zachxbt/status/1698712407177150729?s=20

I just saw this too, Im highly doubtful that this is not an inside job.

Biggest robbery from a crypto casino so far?

Im sure everyone knows the hufflepuff/primedice incident which was definitely the biggest coins stolen but in terms of pure usd this value i dont think any casino heist will even come close 

[bitbollo]

Interesting, thanks for share, I have noticed their message on telegram
Well personally, I would wait a declaration made by site owners before claiming any assumption on this on-chain movement, or at least if there is any official news/source around that to confirm this was a real hack and not just some coins moved from their wallets...

Biggest robbery from a crypto casino so far?

probably yes

[aioc]

Are you an insider? There's nothing related news regarding this yet.

No official news yet from Stake, but there are already few articles out speculating about alleged hack.

According to ZachXBT, additional $25.6 million were hacked on BSC and Polygon
https://twitter.com/zachxbt/status/1698712407177150729?s=20

I just saw this too, Im highly doubtful that this is not an inside job.

Biggest robbery from a crypto casino so far?

It is big news in the gambling industry now.
https://coinmarketcap.com/community/articles/64f5fb76d9a9381cf98108e0/

If they can do this to a big casino they can also do this to small casinos, The hacker is that good he targeted the big fish in the industry, it is time for other casinos to upgrade their security there's the possibility that they will target more casinos, I hope they can trace the movement of the funds like what exchanges has done.

[cryptofrka]

Damn, looks like a hack. If it was an inside transfer, they'd probably confirm it by now, no?

I don't know how much money they're working with on a daily basis, but 40 mil on hot wallets? Looks like way too much.

[AbuBhakar]

This is a wake up call to my fellow gamblers to don’t store crypto in the casino wallet since most of the gambler usually leave their bankroll on there account for a long time until they have enough profit.

Stake is one of the popular casino brand. This is the biggest hack so far for a crypto casino. I wonder how will Stake gonna handle this since this is too much. 

[TryNinja]

Confirmed! It was a hack.

https://x.com/stake/status/1698746766076588057

Three hours ago, unauthorised tx’s were made from Stake’s ETH/BSC hot wallets.

We are investigating and will get the wallets up as soon as they’re completely re-secured.

User funds are safe.

BTC, LTC, XRP, EOS, TRX + all other wallets remain fully operational.

A big amount to lose, indeed… but probably fine for Stake since they have been spending much more with streamers for their platform Kick (i.e supposedly $100m for xqc).

[AmoreJaz]

Confirmed! It was a hack.

https://x.com/stake/status/1698746766076588057

Three hours ago, unauthorised tx’s were made from Stake’s ETH/BSC hot wallets.

We are investigating and will get the wallets up as soon as they’re completely re-secured.

User funds are safe.

BTC, LTC, XRP, EOS, TRX + all other wallets remain fully operational.

A big amount to lose, indeed… but probably fine for Stake since they have been spending much more with streamers for their platform Kick (i.e supposedly $100m for xqc).

no wonder their hot wallet is having that amount of money, which is quite huge already for other small time casinos. indeed, they are paying good amount of money to these streamers, so they can easily get back those hacked funds. now, they probably will tighten their secure and large withdrawals will go thru additional checks. as their withdrawals are almost instant, such huge withdrawals may haven't been flagged down by their system. and already too late when they found out.

[LoyceMobile]

Why would they keep 41 million dollars in a hot wallet? Wouldn't it be much cheaper (considering the risk) to hire someone to monitor hot wallet and top it up when needed? Or does this mean 41 million is like pocket change to them?

[nelson4lov]

Why would they keep 41 million dollars in a hot wallet? Wouldn't it be much cheaper (considering the risk) to hire someone to monitor hot wallet and top it up when needed? Or does this mean 41 million is like pocket change to them?

If anything, I felt they would use a multi-sig  for a hot wallet if they intend to hold such an amount in a hot wallet. Although Stake team confirmed no user funds were lost (i'm sure they would likely reimburse it), but I will be waiting for a post-mortem.

Stake is one of the popular casino brand. This is the biggest hack so far for a crypto casino. I wonder how will Stake gonna handle this since this is too much. 

They would properly reimburse it even if it leaves in a hole in their accounting.

[LoyceMobile]

Although Stake team confirmed no user funds were lost (i'm sure they would likely reimburse it)

Users don't have a direct claim on wallets, so unless they can't afford to pay everyone, it makes sense that no user funds were lost.