CoinMarketCap, a cryptocurrency price tracking website, was reportedly the victim of a hack that leaked 3.1 million user email addresses.
The information came to light after it was discovered that hacked email addresses were being traded and sold online on various hacking forums, and by Have I Been Pwned, a website dedicated to tracking hackers, hacks, and compromised online Accounts dedicated to have been revealed.
CoinMarketCap, a subsidiary of the Binance cryptocurrency exchange, has confirmed that the leaked list of user accounts matches their user base:
“CoinMarketCap recognized that stacks of data were being published online to create a list of user accounts. While the list of data we saw was just email addresses, we found a correlation with our subscriber base. “
The company confirmed the leakage of 3.1 million (3,117,548) user email addresses on October 12, ensuring that hackers were not given access to account passwords. “We found no evidence of data leaks from our own servers – we are actively investigating this matter and will notify our subscribers of any new information as soon as possible,” said a spokesman for CoinMarketCap.
Although it has been confirmed, CoinMarketCap has yet to determine the exact cause of the hack.
CoinMarkatCap did not immediately respond to Cointelegraph’s request for comment.
Related: Hackers exploit MFA vulnerability to steal 6,000 Coinbase customers – report
A recent hack on the Coinbase cryptocurrency exchange resulted in 6,000 user accounts being compromised.
The attack was the result of exploiting the exchange’s Multi-Factor Authentication System (MFA), which revealed that hackers had access to users’ email addresses. According to Coinbase, the attackers identified a vulnerability in the account recovery process:
“In this incident, for customers using SMS messages for two-factor authentication, a third party exploited a vulnerability in Coinbase’s SMS account recovery process to obtain tokens for two-factor authentication. SMS and access to your account . “
While the value of Coinbase’s stolen assets has not yet been revealed, the case has been supplemented by thousands of formal complaints from account holders against the company.