$64 000 000 USD

DECEMBER 2017

SLOVENIA

NICEHASH

DESCRIPTION OF EVENTS

“Hackers stole $64 million from NiceHash, a company that lets users apply their extra GPUs to mining cryptocurrencies.” "Users report that funds have been moved from their own internal Nicehash Bitcoin addresses to a single Bitcoin address controlled by an unknown party." “Kobal said that about 4,700 bitcoins were stolen on December 6th and that a hacker or a group of hackers with an IP address outside of Europe accessed NiceHash computers. Through that access, the hacker(s) obtained a NiceHash engineer’s credentials and used them to access the payment system.” “A hacker or group of hackers had been in a position to infiltrate our inner programs by a compromised firm pc,” stated Marko Kobal, CEO of NiceHash, on Fb reside. “We’re nonetheless conducting a forensic evaluation on how the affected pc was really compromised.” “Now, the company’s co-founder, Marko Kobal, has stepped down as CEO.” “In the aftermath the company decided to return the stolen funds through the Repayment program. 82% of the old funds was already reimbursed by January 2020. Their headquarters are based in Ljubljana, Slovenia.”

 

Explore This Case Further On Our Wiki

NiceHash is not only one of the most popular mining brokerage platforms out there; they also function as a cryptocurrency exchange. The platform was founded in part by Matjaž Škorjanc who is known to have spread malware on millions of PCs, however the breach appears to have occurred through the other founder and CEO Marko Kobal who fell victim to a spear phishing attack. Although details are limited, it would appear likely that the CEO erroneously installed malware on a company PC and this enabled an exploit of what were effectively hot wallets on the website. The company has since paid back 82% and more through a repayment program, however having an extreme amount of funds outside of a proper cold storage raises many questions.

Sources And Further Reading

 For questions or enquiries, email info@quadrigainitiative.com.

Get Social

  • email
  • reddit
  • telegram
  • Twitter

© 2019 - 2026 Quadriga Initiative. Your use of this site/service accepts the Terms of Use and Privacy Policy. This site is not associated with Ernst & Young, Miller Thompson, or the Official Committee of Affected Users. Hosted in Canada by HosterBox.