Coinsbuy crypto payment service hit by hack, loses more than $7.9 million

Coinsbuy, a crypto payment service, was hacked and more than $7.9 million disappeared from its wallets, according to PeckShield. For high-risk PSPs, the part that matters is less the headline number than the mechanics: hot-wallet exposure, cross-chain movement, and rapid use of exchanges to try to break the trail.

1. PeckShield said the incident may have been caused by compromised private keys or a critical vulnerability in Coinsbuy’s infrastructure. The stolen funds were taken from the service’s hot wallets and moved simultaneously across the Ethereum and Tron networks.
2. After the initial drain, the attacker started splitting the assets and routing them through exchange services including FixedFloat, ChangeNOW and BingX, while converting part of the proceeds into Monero, the privacy-focused cryptocurrency that tends to complicate tracing.
3. Coinsbuy said it worked with ChangeNOW to block part of the stolen assets before they could be fully withdrawn. That kind of intervention is often the only practical difference between a clean exit and a partial freeze.
4. The company also said its gateway was suspended for several hours because deposits and withdrawals were frozen, but all services have now been restored and are operating normally.
5. PeckShield and the anonymous blockchain investigator ZachXBT had earlier reported another attack, this time on the THORChain cross-chain swap protocol, with losses estimated at around $10 million.