Crypto Betting Platform Stake Hit by Confirmed $41 Million Hack

On September 4, the crypto betting platform Stake experienced a severe security breach resulting in "suspicious outflows" of $41 million, as reported by blockchain security experts. These illicit transactions involved substantial sums of cryptocurrencies, including Tether (USDT) and Ether (ETH).

Blockchain analysts first detected unusually large withdrawals originating from Stake contracts, funneling funds into an inactive account. This account, later identified as "Stake.com Hacker" by Etherscan, strongly indicates that the cyber attack may have occurred due to a compromised private key.

The initial recorded transaction on the Ethereum blockchain occurred at 12:48 PM, transferring approximately $3.9 million in Tether (USDT) from Stake to the alleged hacker's wallet. In subsequent transactions, the hacker siphoned off 6,001 Ether (ETH), valued at nearly $9.8 million at the time of the attack. The rapid succession of transactions also included the pilfering of other cryptocurrencies, such as $1 million in USD Coin (USDC), $900,000 in Dai (DAI), and 333 Stake Classic tokens, resulting in an estimated total loss of $16 million according to Cyvers.

Following the fund exfiltration, the hacker distributed the stolen assets across multiple accounts. Stake publicly acknowledged the breach and reassured users about the security of their assets, emphasising that only a small portion of the platform's crypto assets, stored in hot wallets, had been affected, minimizing potential impacts on users.

In a subsequent update, Beosin, a smart contract auditing firm, revealed that the breach extended beyond the Ethereum chain, impacting the BNB Smart Chain (BSC) and Polygon networks as well. These additional losses amounted to $7.8 million on Polygon and $17.8 million on BSC, resulting in a cumulative loss of a staggering $41 million.