Bitcoin Depot Loses $3.6M in Bitcoin via Stolen Credentials

Pentesting News reports a significant breach impacting Bitcoin Depot, resulting in the theft of approximately 50 BTC, valued at $3.6 million. The incident, which occurred on March 23rd, was reportedly orchestrated by attackers who gained access through the exploitation of stolen credentials.

This incident highlights a persistent threat vector in the cybersecurity landscape. The compromise of legitimate user credentials, often obtained through phishing, credential stuffing, or other social engineering tactics, can provide attackers with a direct pathway into sensitive systems. In this case, the stolen credentials appear to have granted unauthorized access to Bitcoin Depot’s wallets, enabling the subsequent theft of digital assets.