LocalBitcoins

Third-party Software Vulnerability

Estimated loss

$27.0K

VERDICT —UNRATED

Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.

▰ METHOD

Undisclosed

Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

LocalBitcoins has detected a security vulnerability - an unauthorised source was able to access and send transactions from a number of affected accounts.It was related to a feature powered by a third party software, and stop the attack. At the moment, we are determining the correct number of users affected - so far six cases have been confirmed. Attack method (per SlowMist): Third-party Software Vulnerability. Reported loss: $ 27,000.

Primary source

https://www.reddit.com/r/localbitcoins/comments/ak1u8m/localbitcoins_report_on_the_security/?ref=share&ref_source=twitter ↗

Sourced from

slowmist

Technical record