Blink Attack Incident Leads to 24 Accounts Hacked, 6.61 BTC Stolen, Reward Up to 3.3 BTC

Blink released a recap of the attack incident on September 19, revealing that a total of 6.61 BTC was stolen from 24 customer accounts. The vulnerability has existed since October 2023, allowing any user with a free Blink account to gain customer service-level access, take over customer accounts, and increase withdrawal limits. The attackers obtained partial information from 3,817 accounts, including phone numbers and email addresses; however, names, identification documents, addresses, passwords, and mnemonic phrases were not leaked. The 24 stolen accounts did not have two-factor authentication enabled. The attackers attempted to make 18 withdrawals from 9 accounts that had two-factor authentication enabled, but all attempts were unsuccessful. Blink shareholders have fully compensated all affected customers. Approximately 5 BTC of the stolen funds were subsequently transferred via cross-chain exchange services. Blink is now offering a reward of up to 3.3 BTC for the recovery of the stolen funds, with half of any successfully recovered amount to be allocated to those providing valid leads and the Bitcoin circular economy.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.