Cryptocurrency and crime

This article provides insufficient context for those unfamiliar with the subject. Please help by providing more context for the reader, especially: background information on wallet cryptography and central exchange vulnerabilities related to security of blockchain assets.. (July 2021) (Learn how and when to remove this template message)

Cryptocurrency and crime describes notable examples of cybercrime related to theft (or the otherwise illegal acquisition) of cryptocurrencies and some of the methods or security vulnerabilities commonly exploited. Some of the these tactics include phishing, scamming, supply chain attacks, and general computer hacking. In extreme cases even a computer which is not connected to any network can be hacked.^[1]

Background[]

There are various types of cryptocurrency wallets available, with different layers of security, including devices, software for different operating systems or browsers, and offline wallets.

Novel exploits unique to blockchain transactions exist which aim to create unintended outcomes for those on the other end of a transaction. One of the more well known issues that opens the possibility for exploits on Bitcoin is the transaction malleability problem.^[2]

Notable thefts[]

In 2018, around US$1.7 billion in cryptocurrency was lost due to scams, theft and fraud. In the first quarter 2019, the amount of such losses was US$1.2 billion.^[3]

Exchanges[]

Notable cryptrocurrency exchange compromises resulting in the loss of cryptocurrencies include:

• Bitstamp In 2015 cryptocurrencies worth US$5 million were stolen^{[citation needed]}
• Mt. Gox Between 2011 and 2014, US$350 million worth of bitcoin were stolen^{[citation needed]}
• Bitfinex In 2016, US$72 million were stolen through exploiting the exchange wallet, users were refunded.^{[citation needed]}
• NiceHash In 2017 more than US$60 million worth of cryptocurrency was stolen.^[4]
• Coincheck tokens worth US$400 million were stolen in 2018^[5]
• Zaif US$60 million in Bitcoin, Bitcoin Cash and stolen in September 2018^[6]
• Binance In 2019 cryptocurrencies worth US$40 million were stolen.^[5][7]
• Africrypt founders are suspected of absconding in June of 2021 with US$3.6 billion worth of Bitcoin^[8]
• PolyNetwork (DeFi) suffered the loss of US$611 million in a theft in August of 2021^[9]
• Japanese cryptocurrency exchange Liquid was compromised in August 2021 resulting in a loss of US$97 million worth of digital coins^[10]
• Cream Finance were subject to a US$29 million theft in August, 2021^[11]

Wallets[]

The Parity Wallet has had two security incidents amounting to 666,773 ETH lost or stolen.^[12] In July 2017, due to a bug in the multisignature code, 153,037 ETH (approximately US$32 million at the time) were stolen.^[13][14] In November 2017, a subsequent multisignature^{[clarification needed]} flaw in Parity led to a lock up of 513,774 Ether (about US$150 million at the time) to be unreachable.^[15][16] As of March 2019, the funds were still frozen.^[17]

Energy[]

The value of Proof of Work cryptocurrencies is tied to the cost of energy used to produce them, as such an incentive to steal electricity is created. Notable cases of such theft include:

• In 2019, 13 men were arrested in eastern China for reportedly stealing electricity worth US$3 to operate a Bitcoin mining operation^[18]
• In 2019, six suspects in Germany were arrested for operating a Bitcoin mine using stolen electricity worth US$250,000^[19]
• In February of 2021 Malaysian police arrested six men involved in a Bitcoin mining operation which had stolen US$2 million in electricity^[20]
• Ukraine authorities shutdown an underground gaming and cryptocurrency farm in July, 2021, accused of stealing $259,300 of electricity each month^[21]
• In July 2021 Malaysian authorities destroyed 1,069 cryptocurrency mining systems accused of stealing electricity from the grid^[22]
• In May, 2021 UK authorities closed a suspected bitcoin mine after Western Power Distribution found an illegal connection to the electricity supply^[23]

Blockchains[]

Bitcoin[]

There have been many cases of bitcoin theft.^[24] As of December 2017, around 980,000 bitcoins had been lost on cryptocurrency exchanges.^[25]

One type of theft involves a third party accessing the private key to a victim's bitcoin address,^[26] or of an online wallet.^[27] If the private key is stolen, all the bitcoins from the compromised address can be transferred. In that case, the network does not have any provisions to identify the thief, block further transactions of those stolen bitcoins, or return them to the legitimate owner.^[28]

Theft also occurs at sites where bitcoins are used to purchase illicit goods. In late November 2013, an estimated US$100 million in bitcoins were allegedly stolen from the online illicit goods marketplace Sheep Marketplace, which immediately closed.^[29] Users tracked the coins as they were processed and converted to cash, but no funds were recovered and no culprits identified.^[29] A different black market, Silk Road 2, stated that during a February 2014 hack, bitcoins valued at $2.7 million were taken from escrow accounts.^[30]

Sites where users exchange bitcoins for cash or store them in "wallets" are also targets for theft. Inputs.io, an Australian wallet service, was hacked twice in October 2013 and lost more than $1 million in bitcoins.^[31] GBL, a Chinese bitcoin trading platform, suddenly shut down on 26 October 2013; subscribers, unable to log in, lost up to $5 million worth of bitcoin.^[32] In late February 2014 Mt. Gox, one of the largest virtual currency exchanges, filed for bankruptcy in Tokyo amid reports that bitcoins worth US$350 million had been stolen.^[33] Flexcoin, a bitcoin storage specialist based in Alberta, Canada, shut down in March 2014 after saying it discovered a theft of about $650,000 in bitcoins.^[34] Poloniex, a digital currency exchange, reported in March 2014 that it lost bitcoins valued at around $50,000.^[35] In January 2015 UK-based bitstamp, the third busiest bitcoin exchange globally, was hacked and US$5 million in bitcoins were stolen.^[36] February 2015 saw a Chinese exchange named BTER lose bitcoins worth nearly $2 million to hackers.^[37]

A major bitcoin exchange, Bitfinex, was hacked and nearly 120,000 bitcoins (around US$60 million) was stolen in 2016. Bitfinex was forced to suspend its trading. The theft was the second largest bitcoin heist ever, dwarfed only by Mt. Gox theft in 2014. According to Forbes, "All of Bitfinex's customers,... will stand to lose money. The company has announced a cut of 36.067% across the board."^[38] Following the hack the company refunded customers.^{[citation needed]} On 6 December 2017, more than US$60 million worth of bitcoin was stolen after a cyber attack hit the cryptocurrency-mining platform NiceHash. According to the CEO Marko Kobal and co-founder Sasa Coh, bitcoins worth US$64 million were stolen, although users have pointed to a bitcoin wallet which held 4,736.42 bitcoins, equivalent to $67 million.^[39][40]

On May 7, 2019, hackers stole over 7000 Bitcoins from the Binance Cryptocurrency Exchange, at a value of over 40 million US dollars. Binance CEO Zhao Changpeng stated: "The hackers used a variety of techniques, including phishing, viruses and other attacks.... The hackers had the patience to wait, and execute well-orchestrated actions through multiple seemingly independent accounts at the most opportune time."^[41]

Thefts have raised safety concerns. Charles Hayter, founder of digital currency comparison website CryptoCompare said, "It's a reminder of the fragility of the infrastructure in such a nascent industry."^[42] According to the hearing of U.S. House of Representatives Committee on Small Business on April 2, 2014, "these vendors lack regulatory oversight, minimum capital standards and don't provide consumer protection against loss or theft."^[43]

Ethereum[]

In 2016, known as the DAO event, an exploit in the original Ethereum smart contracts resulted in multiple transactions, creating additional US$50 million. Subsequently, the currency was forked into Ethereum Classic, and Ethereum, with the latter continuing with the new blockchain without the exploited transactions.

In 2017, Tether announced they were hacked, losing US$31 million in USTD^{[clarification needed]} from their primary wallet.^[44] The company has 'tagged' the stolen currency, hoping to 'lock' them in the hacker's wallet (making them unspendable).

Fraud[]

Josh Garza, who founded the cryptocurrency startups GAW Miners and ZenMiner in 2014, acknowledged in a plea agreement that the companies were part of a pyramid scheme, and pleaded guilty to wire fraud in 2015. The U.S. Securities and Exchange Commission separately brought a civil enforcement action against Garza, who was eventually ordered to pay a judgment of US$9.1 million plus $700,000 in interest. The SEC's complaint stated that Garza, through his companies, had fraudulently sold "investment contracts representing shares in the profits they claimed would be generated" from mining.^[45]

Following its shut-down, in 2018 a class action lawsuit for $771,000 was filed against the cryptocurrency platform known as BitConnect, including the platform promoting YouTube channels.^[46] Prior fraud warnings in regards to BitConnect, and cease-and-desist orders by the Texas State Securities Board cited the promise of massive monthly returns.^[47]

OneCoin was a massive world-wide multi-level marketing Ponzi scheme promoted as (but not involving) a cryptocurrency, causing losses of US$4 billion worldwide. Several people behind the scheme were arrested in 2018 and 2019.^[48]

Malware[]

Malware attacks[]

Some malware can steal private keys for bitcoin wallets allowing the bitcoins themselves to be stolen. The most common type searches computers for cryptocurrency wallets to upload to a remote server where they can be cracked and their coins stolen. Many of these also log keystrokes to record passwords, often avoiding the need to crack the keys.^[49] A different approach detects when a bitcoin address is copied to a clipboard and quickly replaces it with a different address, tricking people into sending bitcoins to the wrong address.^[50] This method is effective because bitcoin transactions are irreversible.^[51]:57

One virus, spread through the Pony botnet, was reported in February 2014 to have stolen up to $220,000 in cryptocurrencies including bitcoins from 85 wallets.^[52] Security company Trustwave, which tracked the malware, reports that its latest version was able to steal 30 types of digital currency.^[53]

A type of Mac malware active in August 2013, Bitvanity posed as a vanity wallet address generator and stole addresses and private keys from other bitcoin client software.^[54] A different trojan for macOS, called CoinThief was reported in February 2014 to be responsible for multiple bitcoin thefts.^[54] The software was hidden in versions of some cryptocurrency apps on Download.com and MacUpdate.^[54]

Ransomware[]

Many types of ransomware demand payment in bitcoin.^[55][56] One program called CryptoLocker, typically spread through legitimate-looking email attachments, encrypts the hard drive of an infected computer, then displays a countdown timer and demands a ransom in bitcoin, to decrypt it.^[57] Massachusetts police said they paid a 2 bitcoin ransom in November 2013, worth more than $1,300 at the time, to decrypt one of their hard drives.^[58] Bitcoin was used as the ransom medium in the WannaCry ransomware.^[59] One ransomware variant disables internet access and demands credit card information to restore it, while secretly mining bitcoins.^[57]

As of June 2018, most ransomware attackers preferred to use currencies other than bitcoin, with 44% of attacks in the first half of 2018 demanding Monero, which is highly private and difficult to trace, compared to 10% for bitcoin and 11% for Ether.^[60]

Unauthorized mining[]

In June 2011, Symantec warned about the possibility that botnets could mine covertly for bitcoins.^[61] Malware used the parallel processing capabilities of GPUs built into many modern video cards.^[62] Although the average PC with an integrated graphics processor is virtually useless for bitcoin mining, tens of thousands of PCs laden with mining malware could produce some results.^[63]

In mid-August 2011, bitcoin mining botnets were detected,^[64] and less than three months later, bitcoin mining trojans had infected Mac OS X.^[65]

In April 2013, electronic sports organization E-Sports Entertainment was accused of hijacking 14,000 computers to mine bitcoins; the company later settled the case with the State of New Jersey.^[66]

German police arrested two people in December 2013 who customized existing botnet software to perform bitcoin mining, which police said had been used to mine at least $950,000 worth of bitcoins.^[67]

For four days in December 2013 and January 2014, Yahoo! Europe hosted an ad containing bitcoin mining malware that infected an estimated two million computers.^[68] The software, called Sefnit, was first detected in mid-2013 and has been bundled with many software packages. Microsoft has been removing the malware through its Microsoft Security Essentials and other security software.^[69]

Several reports of employees or students using university or research computers to mine bitcoins have been published.^[70]

On February 20, 2014, a member of the Harvard community was stripped of his or her access to the University's research computing facilities after setting up a Dogecoin mining operation using a Harvard research network, according to an internal email circulated by Faculty of Arts and Sciences Research Computing officials.^[71]

Ars Technica reported in January 2018 that YouTube advertisements contained JavaScript code that mined the cryptocurrency Monero.^[72]

Phishing[]

A phishing website to generate private IOTA wallet seed passphrases, collected wallet keys, with estimates of up to US$4 million worth of MIOTA tokens stolen. The malicious website operated for an unknown amount of time, and was discovered in January 2018.^[73]

Other incidents[]

In late 2018, Canada's largest crypto exchange QuadrigaCX lost US$190 million in cryptocurrency when the owner died; he was the only one with knowledge of the password to a storage wallet. The exchange filed for bankruptcy in 2019.^[74]

Michael Terpin, the founder and chief executive officer of Transform Group, a San Juan, Puerto Rico-based company that advises blockchain businesses on public relations and communications, sued Ellis Pinsky in New York on May 7, 2020, for leading a "sophisticated cybercrime spree" that stole US$24 million in cryptocurrency by hacking into Terpin's phone in 2018.^[75][76] Terpin also sued Nicholas Truglia and won a $75.8 million judgment against Truglia in 2019 in California state court.^[76]

On July 15, 2020, Twitter accounts of prominent personalities and firms, including Joe Biden, Barack Obama, Bill Gates, Elon Musk, Jeff Bezos, Apple, Kanye West, Michael Bloomberg and Uber were hacked. Twitter confirmed that it was a coordinated social engineering attack on their own employees. Twitter released its statement six hours after the attack took place. Hackers posted the message to transfer the Bitcoin in a Bitcoin wallet, which would double the amount. The wallet's balance was expected^{[according to whom?]} to increase to more than $100,000 as the message spread among the Twitter followers.^[77]

See also[]

• Bitcoin network#Alleged criminal activity
• Computer security

References[]