Share this article
LocalBitcoins Releases Investigation Report on Site Wallet Issues
By Stan Higgins
Updated Sep 11, 2021, 10:40 a.m. Published Apr 18, 2014, 5:00 p.m.
Make us preferred on Google
Following yesterday's statement from LocalBitcoins regarding issues with its wallet service, the website has released its follow-up investigation report.
The report focused in part on claims that the site's two-factor authentication failed to prevent a wallet breach. LocalBitcoins also addressed the cause of withdrawal delays that took place as users tried to move their bitcoins away from the site following the posting of user concerns on reddit.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
The LocalBitcoins team wrote in the report's introduction:
"LocalBitcoins team did not found any evidence of compromised site security."
Report walks through hack claims
LocalBitcoins presented an activity timeline of user don4of4 (who initially posted on reddit), including 17th April when the wallet intrusion took place.
The site's team identified that unlike previous logins by the user, someone accessed the site via a Tor browser and had access to don4of4's two-factor authentication key generator.
LocalBitcoins surmised that whoever accessed the user's account had gained access to his mobile device, which don4of4 told the team was used to store the two-factor codes.
The report read:
"In this case if the user used this particular Android device to access LocalBitcoins and the device was compromised, the attacker gained access to user password, user session ID and two-factor codes. Furthermore, it was reported on the reddit that the credentials of this particular user have been found on known compromised user account lists spreading in the internet."
LocalBitcoins added that it does not currently offer session fixation as a security measure. However, the development team will look into the matter as a possible future offering for users.
LocalBitcoins addresses withdrawal problems
As stated previously, concerns regarding the site's integrity resulted in increased withdrawal traffic. Withdrawal delays led to increased anxiety among the site's users.
LocalBitcoins said in its report:
"When the LocalBitcoins hot wallet was being emptied due to high volume of withdraws, the withdraws started to delay. LocalBitcoins choose not to top up the hot wallet until the incident is investigated."
The site added that the majority of its bitcoins are in cold storage.
Wallet malware issues detailed
LocalBitcoin's initial 17th April statement suggested that a malware intrusion had resulted in the loss of some users' wallet credentials.
The investigation report elaborated on this point, saying:
"In all of these cases the user account had no two-factor authentication and had a login coming from an IP address not associated with the users prior behavior pattern. We believe this was an incident either with reused passwords or malware-infection on the use computer."
The report also recommended that all users adopt two-factor authentication for its account, saying that the site is unable to tell the difference between a user login and one from an unauthorised source.
Tough landscape for wallet owners
Malware targeting bitcoin wallets have increased in number significantly in the past year, posing problems for users who don't keep their bitcoins in cold storage.
A recent report by cybersecurity firm Kapersky Labs showed a sharp increase in bitcoin wallet intrusions and attempted intrusions in 2013, compared to 2012 levels.
A separate study conducted by digital security firm Dell SecureWorks found that nearly 150 strains of malware were currently circulating the internet as of February 2014.
More For You
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
What to know:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
More For You
Crypto ETFs with staking can supercharge returns but they may not be for everyone
From yield potential to custody risks, here’s how direct ETH and staking funds compare for different investor goals.
What to know:
- Investors can now choose between owning ether directly or buying shares in a staking ETF that earns rewards on their behalf.
- While staking ETFs offers yield, they come with risks and less control than holding ETH in an exchange or wallet.
- Grayscale’s Ethereum staking ETF recently paid $0.083178 per share, yielding $3.16 in rewards on a $1,000 investment.
Top Stories
