UPDATED 22:51 EDT / JULY 19 2017

EMERGING TECH

$31M stolen in hack that targeted initial coin offering companies

Ethereum wallets linked to at least three companies that have raised funds through initial coin offerings have been hacked, with about 150,000 ETH tokens ($31 million) being stolen.

The hack exploited a vulnerability in wallets provided by Parity Technologies Ltd. and used by three companies. They were Edgeless Casino, which raised around $2 million in an ICO that closed in March with a product that promises to “bring trust back to online gambling;” Swarm City, a company that claims to offer the “first truly decentralized peer to peer sharing economy” and raised funds by selling SWT tokens; and æternity blockchain, which is developing a new blockchain for scalable smart contracts and is quite possibly the largest victim of the hack given that it raised nearly 122,000 ETH in the first stage of its ICO.

Of the three companies, only Swarm City has publicly confirmed that it was hacked, saying in a statement that 44,055 ETH ($9.15 million) had been stolen from its Ethereum wallet.

It’s not clear at this stage whether the three companies were the only Ethereum wallets hacked. Manuel Araoz, co-founder of Ethereum smart contract development firm Zeppelin Solutions, told Motherboard that “many more [wallets] are affected.” But he noted that other wallets may have been drained by “whitehat hackers” who were securing the funds from compromised wallets to be returned to owners once the wallets were patched.

Parity, which advertises its wallets as the “most secure way of interacting with the Ethereum network,” acknowledged the vulnerability that led to the wallets being hacked. But it provided few details, saying only in a security advisory that “a vulnerability in Parity Wallet’s variant of the standard multi-sig contract has been found.” The company has also released a updated version of the wallet code that patches the vulnerability used in the attack.

The hack of Ethereum wallets linked to companies that have offered ICOs comes days after CoinDash, another company with an initial coin offering, had its website hacked and around $7 million in Ethereum tokens stolen.

Image: Pixabay

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

  • 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
  • 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.