An Analysis of How Attackers Stole 337 BTC From Cashaa’s Bitcoin Wallets

Executive summary: In July 2020 attackers stole approximately 337 BTC (~$3.1M) from Cashaa-owned Bitcoin wallets after compromising a user’s computer and extracting wallet information (initial small test theft followed by larger transfers). CertiK researchers observed abnormal transactions and identified the affected Cashaa wallet addresses and recipient address; the report includes timestamps, lists of impacted wallets, possible causes (compromise/backdoor or internal errors), and recommendations such as using cold storage and conducting external security audits.