Digital Asset
Intelligence
Security Incident

GATE.IO Malicious Code Injection Attack

·Historical incident record

Incident Overview

Hackers successfully sandwiched crypto-stealing code into the middle of a popular web traffic-measuring plugin from StatCounter, which is now used on more than two million websites, including government sites. They have determined, however, that the rather wide swath of infections may have been designed to eventually infect cryptocurrency trading sites, and that the scheme did, in fact, infect popular crypto-trading site Gate.io. By situating the code in the middle of StatCounter’s downloadable javascript web traffic analysis tool, hackers made it harder to detect.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Gate.io

    Attack methodAccount Compromise
    Reported lossNot disclosed
  2. Incident date
    Target

    CaseGo

    Attack methodUnknown
    Reported loss200 EOS
  3. Incident date
    Target

    EOSDice

    Attack methodRandom number attack
    Reported loss2,545 EOS
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000