Back to dashboard
Sunday, June 10, 2018 at 05:00 UTC

Coinrail

Korean exchange hot wallet drained.

Partial
Funds stolen
$40.00M
Recovered
$16.00M40%
Still outstanding
$24.00M
Chain
Ethereum
Category
CEX
Attack vector
Private Key Compromise
Reported by
PeckShield
Incident ID
h2018-2

Exploit & recovery timeline

  1. Jun 10, 2018 · 03:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against Coinrail.

  2. Jun 10, 2018 · 05:00 UTC
    Exploit executed

    $40.0M drained from Coinrail on Ethereum via Private Key Compromise.

  3. Jun 10, 2018 · 06:00 UTC
    Detected by PeckShield

    PeckShield flagged the anomalous transactions and published an initial alert.

  4. Jun 10, 2018 · 09:00 UTC
    Protocol response

    Coinrail paused affected contracts or withdrawals and began tracing outbound flows.

  5. Jun 11, 2018 · 05:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Jun 17, 2018 · 05:00 UTC
    Partial recovery

    $16.0M of $40.0M recovered (40%); the remainder is still unaccounted for.

  7. Jul 10, 2018 · 05:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.