All incidents · Jun 3, 2023
Atomic Wallet users report assets moved out
Atomic WalletOtherContainedBitcoin, Ethereum
On June 3, 2023, Atomic Wallet said it had received reports of unauthorized transfers out of user wallets. The company did not publish a dollar total. It said it does not hold private keys. On August 2, Elliptic put user losses at more than $100 million, and said more than $1 million had been frozen. The early figure was more than $35 million.
Other figures
- Loss35million USDZachXBT early in the incident, more than $35 million · as of Jun 5, 2023
Sequence
Newest first · UTC
Aug 22023 · Wed
Elliptic put the loss at more than $100 million
Statement · Elliptic
Elliptic wrote that reported losses to Atomic Wallet users had risen to more than $100 million. It was tracking more than 5,000 wallets it believed were affected. The same piece said that, after work with investigators and exchanges, more than $1 million had been frozen. Elliptic attributed the incident to North Korea's Lazarus Group. This is the security firm's claim. The company's own statement did not confirm a dollar total, and it did not confirm a cause.
Elliptic’s analysis shows that the reported losses suffered by Atomic Wallet users has now risen to more than $100 million.
Jul 62023 · Thu
The company revised this to under 0.1% of app users
Revision · Atomic Wallet · @AtomicWallet
Atomic Wallet reposted the statement on the June 3 incident and turned comments off. It said this was to deal with impersonation accounts. The summary was changed to fewer than 0.1% of app users affected, with no new cases after June 3. The company again said it cannot access private keys or user funds. A dollar total still did not appear.
To summarise, less than 0.1% of Atomic app users have been affected. Since then, no new cases have been reported.
Jun 52023 · Mon
The company said fewer than 1% of monthly active users were affected
Statement · Atomic Wallet · @AtomicWallet
Decrypt cited Atomic Wallet's post that day. The company said that, at the time, fewer than 1% of monthly active users were affected or had reported. The last transaction that was moved out had been confirmed more than 40 hours earlier. The investigation was still going. At the same time, Fortune cited ZachXBT and put the loss at more than $35 million. The company's post did not use that dollar figure.
At the moment less than 1% of our monthly active users have been affected/reported.
Jun 32023 · Sat
Reports of unauthorized transfers started on June 3
Alert · Atomic Wallet
Atomic Wallet's later statement says the support team began receiving user reports on June 3. Users said unauthorized transactions had appeared in their wallets. The team warned users on social accounts and paused app downloads and updates. The company said it is a non-custodial wallet. It does not hold private keys, and it has no user accounts, so the cause was harder to investigate. The statement has no dollar total. The company also said there were no new confirmed cases after June 3.
On Saturday, June 3, 2023, our support team started receiving reports from users claiming unauthorized transactions from their wallets.