Bitcoin ATM maker shuts cloud service after user hot wallets compromised
Bitcoin ATM manufacturer General Bytes has shuttered its cloud services after discovering a “security vulnerability” that allowed an attacker to access users' hot wallets and gain sensitive information, such as passwords and private keys.
The company is a Bitcoin (BTC) ATM manufacturer based in Prague, and according to its website, has sold over 15,000 ATMs to over 149 countries all over the world.
In a March 18 patch release bulletin, the ATM manufacturer issued a warning explaining that a hacker has been able to remotely upload and run a Java application via the master service interface into its terminals aimed at stealing user information and sending funds from hot wallets.
On March 17-18th, 2023, GENERAL BYTES experienced a security incident.We released a statement urging customers to take immediate action to protect their personal information.We urge all our customers to take immediate action to protect their funds and https://t.co/fajc61lcwR… https://t.co/g5FGqvqZQ7
General Byes founder Karel Kyovsky in the bulletin explained this allowed the hacker to achieve the following:
The notice reveals that both General Bytes' cloud service was breached as well as other operators' standalone severs.
“We’ve concluded multiple security audits since 2021, and none of them identified this vulnerability,” Kyovsky said.
Though the company noted that the hacker was able to “Send funds from hot wallets,” it did not disclose how much was stolen as a result of the breach.
However, General Bytes released the details of 41 wallet addresses that were used in the attack. On-chain data shows multiple transactions into one of the wallets, resulting in a total balance of 56 BTC, worth over $1.54 million at current prices.
Another wallet shows
Read more on cointelegraph.com
