Loanbase, a Bitcoin P2P lending platform formerly known as BitLendingClub, has sent a security bulletin to all its customers informing them that a breach has taken place in the early morning hours on the 6th of February.
According to the update, the total amount of funds stolen was 8 BTC. Security staff from Loan base estimate that the login details of four customer accounts were compromised.
“We detected that the unauthorized access of the user accounts occurred early in the morning on February 6th and continued throughout the day.”
Although the current estimate stands at 8 BTC, the bulletin said that the maximum loss will not exceed 20 BTC.
Those accounts apparently did not have two-factor authentication setup, which made the beach a lot easier for the perpetrators. The intrusion into Loanbase’s servers took place via a WordPress security hole that allowed the hackers to access the SQL database, which happens to contain sensitive user details such as emails, phone numbers and names.
Loanbase staff have made a promise to reimburse customers who have lost funds in this incident.
“Yes, we will return all the funds of the users who have had an unauthorized withdrawal.”
The security bulletin stated that the site has been taken down for a security update and all pending withdrawals have been suspended.
“Any withdrawals which were approved, but not processed yet, will all be rejected.”
Reddit users have criticized Loanbase for using the WordPress platform, which is known to have plenty of vulnerabilities.
Image credit: 1
If you liked this article follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin and altcoin price analysis and the latest cryptocurrency news.
Velocity Ticket is trying to fix a major gap in businesses, and the approach it…
Axelar is moving fast to contain damage after identifying a security incident that has resulted…
suiUSDe now has a dedicated landing page. The token, officially the eSui Dollar, comes out…
Ventuals has fully wound down its HIP-3 DEX, and vHYPE withdrawals are now open. The…
Avalanche has launched the Avalanche Payments Collective, bringing together 28 organizations spanning nearly every layer…
A wallet tracked as 0x5f91 just opened a fresh 5x leveraged long on ASTER, putting…