Hackers Drain $8 Million From Crypto Exchange Across Two Blockchains

In brief

• An attacker drained $8.07 million from Coinsbuy wallets across Tron and Ethereum on August 9.
• About $6.34 million of the stolen funds passed through FixedFloat, according to BlockWatchdog.
• Coinsbuy later replenished the drained wallets, suggesting the private keys may not have been compromised.

An attacker drained more than $8 million from crypto platform Coinsbuy across the Tron and Ethereum networks on Sunday before moving most of the stolen funds, according to an analysis by blockchain investigator BlockWatchdog.

In a report posted on X, BlockWatchdog said the attack began on Tron with a 5 USDT test transaction. Minutes later, more than 6 million USDT was drained from eight Coinsbuy wallets. On Ethereum, another 1.89 million USDT and 77 ETH were taken from three wallets.

BlockWatchdog linked the Tron and Ethereum transactions to the same attacker through cross-chain swap service Bridgers. The attacker then moved about $6.34 million, or 79% of the stolen funds, through the FixedFloat cryptocurrency exchange. Another 150 ETH was sent through ChangeNOW.

According to BlockWatchdog, another 282.2 ETH, worth about $542,000 at the time of the attack, remained untouched across five addresses.