Yesterday, many Atomic Wallet users reported that their accounts were hacked and their funds were stolen.
Fun fact: Some security vulnerabilities were discovered with Atomic Wallet in February 2022 after their security audit by Least Authority.
So far, ~$35M has been pocketed.
The exact details of how the hack happened still need to be determined.
But back in Feb 2022, a report by Least Authority found multiple security-critical issues with Atomic Wallet, such as
- Weak encryption
- Lack of authentication
- Poor code quality
If not resolved, these vulnerabilities might have allowed hackers to re-initialize the wallet, set themselves as the new owners, and then transfer the funds to their own addresses.
If you were affected by this, please get in touch with the team at Atomic Wallets and @zachxbt; he's been updating everyone on the situation since yesterday. There are also many phishing messages posted with links that could be more harmful.
Please verify before interacting with any link, transaction, or Twitter account. And if you weren't affected but still have assets on Atomic generated wallets— crypto & NFTs— please move them to a different one.
