Algorand’s Venture Arm Loses up to $2M in Hot Wallet Breach: Report

Published at: Oct. 6, 2019

Algo Capital, an investment arm of United States-based blockchain firm Algorand, has lost roughly $1–2 million in Tether (USDT) stablecoins and Algorand (ALGO) tokens after its CTO Pablo Yabo’s mobile phone was compromised.

The breach allowed hackers to gain access to Yabo-managed Algo hot wallet, a source familiar with the matter told Coindesk on Oct. 5.

The total amount of damages was reported in an email by the company’s CEO David Garcia. He confirmed the security breach and claimed that the firm passed the details of the incident to its limited partners, according to the article.

Full reimbursement in 20 months

Citing an anonymous source, the report says that Algorand is aware of the breach suffered by Algo Capital so far. The company will take full responsibility for the loss and plans to reimburse the entire amount in 20 months, Garcia reportedly wrote, adding:

“We are engaging with certain key organizations and security services to collaborate and address this issue which has become a common industry problem.”

While Algorand network was not affected as the majority of its funds are held in cold wallets that were not breached, Yabo has reportedly resigned from his position, according to the email sent to partners.

In August 2019, Algo Capital raised $200 million for its venture capital fund planning to invest in businesses helping to build infrastructure for the Algorand blockchain. Based on Byzantine Agreement message-passing protocol, the network is an open-source public ledger and cryptocurrency payment system.

Meanwhile, Algo token has seen a notable drop today, down 3.53% over the past 24 hours, according to CoinMarketCap. The coin is currently 54th biggest cryptocurrency by market capitalization of $90.3 million at press time.

Tags
Related Posts
Wallet Creator Offers $250K to Anyone Who Can Crack the ‘Hack-Proof’
Offline cold storage cryptocurrency wallet service provider GK8 is offering a bug bounty of up to $250,000 to the first person who can hack its product. GK8 — which presents its solution as a “hack-proof digital vault” that needs no direct or indirect connection to the internet — will place 14 Bitcoin (BTC) (over $125,000 at press time) in its wallet. Anyone who succeeds in breaking into the wallet will pocket its proceeds, plus an additional $125,000 prize. The bounty program will run from Feb. 3 (9:00 a.m EST) through February 4, 2020 (9:00 AM EST). Mitigating state-sponsored attacks and …
Blockchain / Jan. 28, 2020
Trident Crypto Fund Data Breach: 266,000 Passwords Stolen
In a major privacy breach, the usernames and passwords of more than a quarter of a million Trident Crypto Fund customers have been stolen and published online. Technical director of cybersecurity firm DeviceLock Ashot Oganesyan told Russian news outlet IZ the database — which contains email addresses, cellphone numbers, encrypted passwords and IP addresses — had been uploaded to various file sharing websites on February 20. Earlier this week, hackers decrypted and published close to 120,000 of the passwords, potentially enabling them to log into affected users’ accounts and access their funds. 10,000 Russians affected Oganesyan said that while attacks …
Blockchain / March 6, 2020
Binance Falls From Top 10 in CryptoCompare’s New Crypto Exchange Rankings
London-based crypto data provider CryptoCompare has updated its crypto Exchange Benchmark, removing Binance cryptocurrency exchange from the list of the top 10 exchanges. Binance, the second biggest crypto exchange by daily trade volume to date, is not included in the CryptoCompare’s list as the rankings do not rely on aggregate volume data in its analysis, the firm said in a press release to Cointelegraph on Nov. 19. In order, the top 10 crypto exchanges in CryptoCompare’s second Exchange Benchmark are: Gemini, Paxos’ itBit, Coinbase, Kraken, Bitstamp, Liquid, OKEx, Poloniex, bitFlyer and Bitfinex. Binance was ranked seventh in the first Exchange …
Blockchain / Nov. 20, 2019
Crypto app targeting SharkBot malware resurfaces on Google app store
A newly upgraded version of a banking and crypto app targeting malware has recently resurfaced on the Google Play store, now with the capability to steal cookies from account logins and bypass fingerprint or authentication requirements. A warning about the new version of the malware was shared by malware analyst Alberto Segura and treat intelligence analyst Mike Stokkel on Twitter accounts on Sept. 2, sharing their co-authored article on Fox IT’s blog. We discovered a new version of #SharkbotDropper in Google Play used to download and install #Sharkbot! The found droppers were used in a campaign targeting UK and IT! …
Blockchain / Sept. 5, 2022
Main hacker in Transit Swap exploit agrees to return remaining funds
On Monday, decentralized finance (DeFi) protocol Transit Swap announced that it had reached an agreement with its biggest hacker for the return of funds. Approximately one week prior, a hacker exploited an internal bug on a swap contract within the protocol and caused other individuals to imitate the security breach, leading to a loss of over $23 million in user funds. However, the main hacker has since returned approximately 70% of exploited funds thanks to the help of security companies such as Peckshield, SlowMist, Bitrace, and TokenPocket. They quickly tracked down the hacker by identifying their IP address, email address, …
Blockchain / Oct. 10, 2022