{"id":3270,"date":"2018-01-15T02:34:08","date_gmt":"2018-01-15T02:34:08","guid":{"rendered":"https:\/\/www.legitgambling.com\/news\/?p=3270"},"modified":"2018-01-15T12:02:44","modified_gmt":"2018-01-15T12:02:44","slug":"hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash","status":"publish","type":"post","link":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/","title":{"rendered":"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash"},"content":{"rendered":"

\"\"Three weeks before, as many as 20 Reddit users, who were part of the r\/btc group<\/a> supporting Bitcoin Cash (BCH), lost their holdings in their hot wallet. The total amount lost was estimated to be between $2,000 and $4,000. An investigation into the theft revealed the novel tactics employed by hackers<\/a> to steal Bitcoin Cash.<\/p>\n

The hacking of BCH hot wallets was accomplished by misusing the tipping facility provided in the social news aggregation site. The tipping process is handled by a bot named Tippr. Once a Reddit member sets the desired amount for donation and activates the facility, Tippr will withdraw from the hot wallet of the donor and send it to the recipient.<\/p>\n

The hacker took advantage of vulnerability in the third-party email functionality, provided by Mailgun<\/a>, to initiate a password reset of the Reddit account. Even users with two-factor authentication were unable to escape from the attack. More importantly, users did not receive any kind of alert about suspicious activity in their emails.<\/p>\n

Reddit blamed Mailgun for the incident, resulting in the loss of Bitcoin Cash from the hot wallet. Mailgun accepted their fault, but said the customer payment information was not compromised in any way. Reddit engineer gooeyblob <\/strong>said<\/p>\n

\u201cA malicious actor targeted Mailgun and gained access to Reddit\u2019s password reset emails. The nature of the exploit meant that an unauthorized person was able to access the contents of the reset email. This individual did not have access to either Reddit\u2019s system or to a Redditor\u2019s email account. As an immediate precautionary measure, we moved reset emails to an in-house mail server.\u201d<\/p><\/blockquote>\n

Josh Odom<\/strong>, Mailgun CTO guaranteed that the point of access exploited by the hackers has been closed. Odom also informed that additional security measures have been employed to safeguard users\u2019 data.<\/p>\n

Odom said<\/p>\n

\u201cMailgun has now completed its diagnostic of accounts that were affected and has notified each of the affected users. At this time, we believe less than one percent of our customer base was potentially affected.\u201d<\/p><\/blockquote>\n

Reddit has also disabled the Tippr bot temporarily. Ironically, Bitcoin supporters and even the administrator of Reddit was blamed for the incident before software engineers identified the manner in which the hacker gained access to the hot wallet.<\/p>\n

It is not the first time such an incident is happening. A few years back, Dogecoin wallets were hacked, leading to a loss of about 21 million coins. However, the Doge community joined hands to raise money for victims.<\/p>\n","protected":false},"excerpt":{"rendered":"

Three weeks before, as many as 20 Reddit users, who were part of the r\/btc group supporting Bitcoin Cash (BCH), lost their holdings in their hot wallet. The total amount lost was estimated to be between $2,000 and $4,000. An investigation into the theft revealed the novel tactics employed by hackers to steal Bitcoin Cash. […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[69,68,1],"tags":[],"class_list":["post-3270","post","type-post","status-publish","format-standard","hentry","category-bitcoin","category-cryptocurrency","category-usa"],"yoast_head":"\nHackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash<\/title>\n<meta name=\"description\" content=\"Hackers exploited Reddit\u2019s email vulnerability to gain access to Bitcoin Cash held in the hot wallet of users who had activated the tipping facility.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash\" \/>\n<meta property=\"og:description\" content=\"Hackers exploited Reddit\u2019s email vulnerability to gain access to Bitcoin Cash held in the hot wallet of users who had activated the tipping facility.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/\" \/>\n<meta property=\"article:published_time\" content=\"2018-01-15T02:34:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-01-15T12:02:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/reddit.jpg\" \/>\n<meta name=\"author\" content=\"Cameron Bishop\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cameron Bishop\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/\"},\"author\":{\"name\":\"Cameron Bishop\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\"},\"headline\":\"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash\",\"datePublished\":\"2018-01-15T02:34:08+00:00\",\"dateModified\":\"2018-01-15T12:02:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/\"},\"wordCount\":421,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/reddit.jpg\",\"articleSection\":[\"Bitcoin\",\"Cryptocurrency\",\"USA\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/\",\"name\":\"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/reddit.jpg\",\"datePublished\":\"2018-01-15T02:34:08+00:00\",\"dateModified\":\"2018-01-15T12:02:44+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\"},\"description\":\"Hackers exploited Reddit\u2019s email vulnerability to gain access to Bitcoin Cash held in the hot wallet of users who had activated the tipping facility.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/reddit.jpg\",\"contentUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/reddit.jpg\",\"width\":380,\"height\":250},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\",\"name\":\"Cameron Bishop\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"caption\":\"Cameron Bishop\"},\"description\":\"Cameron works tirelessly behind the scenes ensuring his many US news stories are factual, informative and brought to you in a timely fashion before most other media outlets have them. He is an investigative journalist at heart who also has a fond interest in the money and business markets too.\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/author\\\/cameron-bishop\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash","description":"Hackers exploited Reddit\u2019s email vulnerability to gain access to Bitcoin Cash held in the hot wallet of users who had activated the tipping facility.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/","og_locale":"en_US","og_type":"article","og_title":"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash","og_description":"Hackers exploited Reddit\u2019s email vulnerability to gain access to Bitcoin Cash held in the hot wallet of users who had activated the tipping facility.","og_url":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/","article_published_time":"2018-01-15T02:34:08+00:00","article_modified_time":"2018-01-15T12:02:44+00:00","og_image":[{"url":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/reddit.jpg","type":"","width":"","height":""}],"author":"Cameron Bishop","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cameron Bishop","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/#article","isPartOf":{"@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/"},"author":{"name":"Cameron Bishop","@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91"},"headline":"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash","datePublished":"2018-01-15T02:34:08+00:00","dateModified":"2018-01-15T12:02:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/"},"wordCount":421,"commentCount":0,"image":{"@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/#primaryimage"},"thumbnailUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/reddit.jpg","articleSection":["Bitcoin","Cryptocurrency","USA"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/","url":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/","name":"Hackers Exploit Reddit\u2019s Email Vulnerability To Steal Bitcoin Cash","isPartOf":{"@id":"https:\/\/www.legitgambling.com\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/#primaryimage"},"image":{"@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/#primaryimage"},"thumbnailUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/reddit.jpg","datePublished":"2018-01-15T02:34:08+00:00","dateModified":"2018-01-15T12:02:44+00:00","author":{"@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91"},"description":"Hackers exploited Reddit\u2019s email vulnerability to gain access to Bitcoin Cash held in the hot wallet of users who had activated the tipping facility.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.legitgambling.com\/news\/hackers-exploit-reddits-email-vulnerability-steal-bitcoin-cash\/#primaryimage","url":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/reddit.jpg","contentUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/reddit.jpg","width":380,"height":250},{"@type":"WebSite","@id":"https:\/\/www.legitgambling.com\/news\/#website","url":"https:\/\/www.legitgambling.com\/news\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.legitgambling.com\/news\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91","name":"Cameron Bishop","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","caption":"Cameron Bishop"},"description":"Cameron works tirelessly behind the scenes ensuring his many US news stories are factual, informative and brought to you in a timely fashion before most other media outlets have them. He is an investigative journalist at heart who also has a fond interest in the money and business markets too.","url":"https:\/\/www.legitgambling.com\/news\/author\/cameron-bishop\/"}]}},"_links":{"self":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts\/3270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/comments?post=3270"}],"version-history":[{"count":0,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts\/3270\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/media?parent=3270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/categories?post=3270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/tags?post=3270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}