Odaily Planet Daily News According to Bitcoin News monitoring, Blink released a complete review of the attack on September 19: The attack resulted in a total of 6.61 BTC being stolen from 24 customer accounts. The company said the flaw, which has existed since October 2023, could have allowed any user with a free Blink account to gain customer service-level access, take over customer accounts and increase withdrawal limits. The attackers also obtained some information on 3,817 accounts, including some phone numbers and email addresses; names, IDs, addresses, passwords, and mnemonics were not leaked.
None of the 24 accounts that were compromised had two-factor authentication enabled. The attackers attempted 18 unsuccessful withdrawals from 9 accounts that had two-factor authentication protection enabled. Blink shareholders have fully compensated all affected customers.
Approximately 5 stolen BTC were subsequently transferred via cross-chain exchange services. Blink is now offering a recovery reward of up to approximately 3.3 BTC, and half of any successfully recovered funds will be distributed to those who provide valid clues and the Bitcoin Circular Economy.