JRNY Crypto Theft Private Key Leakage

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Revision as of 18:53, 15 January 2025 by Azoundria (talk | contribs) (Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/jrnycryptotheftprivatekeyleakage.php}} {{Unattributed Sources}} thumb|JRNY Crypto Pictures/HomepageJRNY Crypto runs a YouTube channel about cryptocurrency investing, most famously being one of the first to get into the Bored Ape Yacht Club. In November 2024, one of his wallets was reportedly compromised, and $4m+ worth of assets were drained from it. There doesn'...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

JRNY Crypto Pictures/Homepage

JRNY Crypto runs a YouTube channel about cryptocurrency investing, most famously being one of the first to get into the Bored Ape Yacht Club. In November 2024, one of his wallets was reportedly compromised, and $4m+ worth of assets were drained from it. There doesn't appear to be any public mention of the breach, although multiple sources have reported on it. It is unclear what actions, if any, JRNY Crypto plans to take.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20]

About JRNY Crypto

"JRNY is a pseudonymous influencer with over 760,000 followers on X and 590,000 on YouTube, who often posts about non-fungible token collections, including Bored Ape Yacht Club."

"Tony started as a Crypto YouTuber back in 2017. He's since amassed a substantial social media following across multiple platforms and built an unprecedented NFT portfolio. In 2021, he ventured into NFTs and launched JRNY Club with the goal to create a community of NFT enthusiasts to help guide each other along the journey."

"Most commonly known as ‘JRNY Crypto,’ Tony Spark hosts a popular YouTube channel that posted videos and market commentary almost daily throughout 2021-2022. Tony has since expanded his empire and launched two NFT collections, the JRNY Club Pass and Planet Xolo. JRNY Crypto is perhaps most famous for calling the Bored Ape Yacht Club and holding over 100 BAYC NFTs."

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

"crypto influencer JRNY saw ~$4M worth of crypto assets suspiciously transferred out and sold indicating a potential private key compromise."

Key Event Timeline - JRNY Crypto Theft Private Key Leakage
Date Event Description
January 4th, 2024 4:00:00 AM MST Crypto Influencer List Inclusion JRNY Crypto is included in a list of crypto influencers that you need to know about published by DailyCoin.
November 22nd, 2024 12:53:35 AM MST Apecoin Transfered The first transfer involving 600k ApeCoin.
November 22nd, 2024 9:46:00 AM MST ZachXBT Telegram Post ZachXBT posts an investigation on Telegram with information about the fund theft.
November 22nd, 2024 10:48:00 AM MST CyversAlert Tweet Cyvers posts a tweet about the suspected breach.
December 3rd, 2024 5:39:25 AM MST CoinTelegraph Publishes CoinTelegraph publishes an article full of breaches, which includes JRNY.

Technical Details

"Theft address 0xc467150582cfc8eec4132a483c76101d3636f598 0x6fd6c8fd64c7efdb8eec902161d3bbc035430456 0xa2dd5e2ab84240cbecc7beaca9946afef97ae74a"

Total Amount Lost

The total amount lost has been estimated at $4,000,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

Immediate Reactions

"On-chain investigator ZachXBT stated on his personal Telegram channel that the wallet associated with crypto KOL JRNY appears to have been compromised, with approximately $4 million worth of crypto assets transferred and sold. This suggests that the wallet's private key may have been leaked."

"A few hours ago wallets tied to crypto influencer JRNY saw ~$4M worth of crypto assets suspiciously transferred out and sold indicating a potential private key compromise.

"ALERT Today, Our system has detected multiple suspicious transactions involving crypto influencer #JRNY! and hack was recently confirmed by @zachxbt.

Total loss is around $4M and most of the stolen funds were in $APE, $USDC, $HYVE, $KARRAT, $WETH and $BYTES. Root cause seems to be private key compromise. Stolen funds later on swapped to $ETH and consolidated at 0xa2dd5e2ab84240cbecc7beaca9946afef97ae74a"

Ultimate Outcome

"Cointelegraph could not find an acknowledgment of the attack on JRNY’s profiles."

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

Ongoing Developments

What parts of this case are still remaining to be concluded?

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References