{"id":22745,"date":"2018-01-15T21:31:05","date_gmt":"2018-01-15T21:31:05","guid":{"rendered":"http:\/\/ci027cfe7990132697"},"modified":"2018-01-15T21:31:05","modified_gmt":"2018-01-15T21:31:05","slug":"blackwallet-hacked-warns-stellar-community-not-log-site","status":"publish","type":"post","link":"https:\/\/bitcoinmagazine.com\/business\/blackwallet-hacked-warns-stellar-community-not-log-site","title":{"rendered":"BlackWallet Hacked: Warns Stellar Community Not to Log In to Site"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/11\/blackwallet-hacked-warns-stellar-community-not-to-log-in-to-site.jpg\" title=\"\"><\/figure>\n<p>On January 13, an unknown hacker(s) hijacked the DNS server for <a href=\"http:\/\/blackwallet.co\/\" target=\"_blank\" rel=\"noopener\">BlackWallet.co<\/a>, a web-based wallet for the Stellar Lumens cryptocurrency, and redirected it to their own server.<\/p>\n<p>Security researcher Kevin Beaumont, who analyzed the code, <a href=\"https:\/\/twitter.com\/GossiTheDog\/status\/952359336893874176\" target=\"_blank\" rel=\"noopener\">said<\/a>, \u201cThe DNS hijack of Blackwallet injected code, if you had over 20 Lumens it pushes them to a different wallet.\u201d It is estimated that nearly 700,000 Lumens (XLM) were stolen, with a current value of over $400,000. <\/p>\n<p>Warnings and alerts not to log into the BlackWallet site have been sent out by the BlackWallet team and other XLM users via <a href=\"https:\/\/stellarcommunity.org\/t\/blackwallet-enhanced-account-viewer-giveaway\/690\/127\" target=\"_blank\" rel=\"noopener\">Stellar Community<\/a>, <a href=\"https:\/\/galactictalk.org\/d\/369-blackwallet-enhanced-account-viewer\/113\" target=\"_blank\" rel=\"noopener\">Galactic Talk<\/a>, <a href=\"https:\/\/www.reddit.com\/r\/Stellar\/comments\/7q72pw\/warning_blackwalletco_hacked_check_your_public_key\/\" target=\"_blank\" rel=\"noopener\">Reddit<\/a>, <a href=\"https:\/\/twitter.com\/orbit0x54\/status\/952369083978305546\" target=\"_blank\" rel=\"noopener\">Twitter<\/a> and <a href=\"https:\/\/github.com\/orbit84\/blackwallet\/issues\/4\" target=\"_blank\" rel=\"noopener\">GitHub<\/a>. Unfortunately, users continued to log in for some time, and thus, saw their funds vanish from their wallets.<\/p>\n<p>Following the <a href=\"https:\/\/stellarchain.io\/address\/GBH4TZYZ4IRCPO44CBOLFUHULU2WGALXTAVESQA6432MBJMABBB4GIYI\" target=\"_blank\" rel=\"noopener\">address<\/a> of the attacker, it is possible to track the movement of funds from BlackWallet to the Bittrex exchange, where they are likely to convert the funds and cover their tracks. BlackWallet has since messaged <a href=\"https:\/\/twitter.com\/orbit0x54\/status\/952368665206427653\" target=\"_blank\" rel=\"noopener\">Bittrex<\/a> in an effort to coordinate with the exchange to block the hacker\u2019s account. <\/p>\n<p>In a <a href=\"https:\/\/www.reddit.com\/r\/Stellar\/comments\/7q9g31\/statement_blackwallet_hacks_update\/\" target=\"_blank\" rel=\"noopener\">statement<\/a> on Reddit, the BlackWallet admin is suggesting that people move their funds to a new wallet using the Stellar account viewer. At the time of this writing, the BlackWallet website is returning a 404 error. <em>Bitcoin Magazine<\/em> will update this story as it evolves.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On January 13, an unknown hacker(s) hijacked the DNS server for BlackWallet.co, a web-based wallet for the Stellar Lumens cryptocurrency, and redirected it to their own server. Security researcher Kevin Beaumont, who analyzed the code, said, \u201cThe DNS hijack of Blackwallet injected code, if you had over 20 Lumens it pushes them to a different [&hellip;]<\/p>\n","protected":false},"author":3496,"featured_media":22746,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[1547,2606,3486],"class_list":["post-22745","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-bittrex","tag-hacks","tag-stellar"],"author_data":{"id":3496,"name":"Shawn Gordon","nicename":"shawn-gordon","avatar_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/12\/shawn-gordon-promo-image-96x96.jpg"},"featured_image_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/11\/blackwallet-hacked-warns-stellar-community-not-to-log-in-to-site.jpg","_links":{"self":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/22745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/users\/3496"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/comments?post=22745"}],"version-history":[{"count":0,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/22745\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media\/22746"}],"wp:attachment":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media?parent=22745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/categories?post=22745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/tags?post=22745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}