Share this article
Hackers Breach Popular Web Analytics Site to Target Crypto Exchange
Cryptocurrency exchange Gate.io was apparently the target of hackers who compromised a widely used web analytics platform.
Updated Sep 13, 2021, 8:34 a.m. Published Nov 7, 2018, 1:05 p.m.
Cryptocurrency exchange Gate.io was apparently the target of hackers who compromised a widely used web analytics platform this week.
According to a report from internet security firm ESET on Tuesday, bad actors compromised Ireland-based web analytics site StatCounter, in an attempt to steal bitcoin from the exchange's customers.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
The attackers managed to inject malicious code into the script of StatCounter webpage, having also registered a domain very similar to the official one. The fake domain swapped two letters from the original to form "StatConuter", which can be difficult to spot while scanning for unusual activity, says ESET, adding that the domain had previously been suspended in 2010 for association with abusive behaviour.
StatCounter is used by more than two million websites, according to its own figures, and it provides statistics on billions of web hits daily. The fake account managed to get picked up by a number of sites, although Gate.io seems to have been the only target.
The report states that the script targets a specific uniform resource identifier (URI): "myaccount/withdraw/BTC."
"It turns out that among the different cryptocurrency exchanges live at time of writing, only Gate.io has a valid page with this URI. Thus, this exchange seems to be the main target of this attack," it concludes.
The URI is notably used by Gate.io to transfer bitcoin from its own account to an external bitcoin address, according to the report. The hackers' script automatically replaces a user's bitcoin address with one belonging to the attackers.
As the malicious server generates a new bitcoin address each time a visitor loads the StatConuter script, "it is hard to see how many bitcoins have been transferred to the attackers," the researchers say.
After being notified by ESET about the breach, Gate.io announced Wednesday that it "immediately removed" the StatCounter service from its site, and stressed that the users' funds are "safe."
CoinMarketCap data indicates that Gate.io is the 38th largest crypto exchange globally by adjusted trading volume. The firm's website indicates it is based in the Cayman Islands.
Hacker image via Shutterstock
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Bulls beware — BofA Fund Manager Survey flashing contrarian sell signal
Bitcoin could see further declines if traditional markets sharply pull back, or just possibly a broad tumble in stocks could set the stage for a bull run in crypto.
What to know:
- Investor cash allocations fell to a record-low 3.3%, according to the Bank of America's latest Fund Manager Survey, while exposure to equities and commodities reached the highest levels since early 2022.
- Optimism about a soft landing and rising profits pushed sentiment to its strongest point since mid-2021.
- A decline in traditional markets might seem to point to further losses in crypto, but it could also be a bullish signal.
Top Stories
