Metawin Hit by $4M Hack - My Analysis

[FredJefferson87]

Just got word about massive hack at Metawin. Here's what we know:

• $4M stolen through hot wallet exploit
• Hacker used frictionless withdrawal system
• Funds traced to KuCoin and HitBTC
• ZachXBT tracked 115+ associated addresses
• Almost all withdrawals already restored

Sources: Cointelegraph

As someone affected, I'll keep this thread updated with developments.

 

[CiViP]

This is huge... using their frictionless withdrawal system is clever but sending to CEX is amateur hour. Anyone know if the funds on KuCoin got frozen yet?

 

[BillThornes]

Key points to consider:

Hot wallet compromise, not game systems
Rapid response team in place
Withdrawal systems already restored
CEX tracking possible through KYC
Pretty solid crisis management overall.

 

[p@yd@y]

imagine being smart enough to hack them but dumb enough to send to KuCoin

 

[Thomas.com]

Been in crypto gambling since 2020 - interesting how they recovered faster than Stake did after their $41M hack last year. Their team must've been ready for this kind of scenario.

 

[FredJefferson87]

Update: Support confirmed my withdrawal should process within 24hrs. They're prioritizing smaller amounts first.

 

[GamblelapA]

@Thomas.com probably because funds went to KuCoin which requires full KYC since August - much easier to track/freeze than if they went to DEX

 

[j@[email protected]]

anyone know if this affected their Web3 wallet withdrawal limits? was about to move some funds...

 

[He1en]

Impressive they topped up hot wallet that fast. Shows serious financial backing.

 

[FredJefferson87]

anyone know if this affected their Web3 wallet withdrawal limits? was about to move some funds...

check their latest announcement mate - most limits restored but they've added extra verification steps for large amounts

 

[Joe_Monster]

Looking at ZachXBT's thread - 115 addresses is messy opsec by hackers. They really messed up the laundering

 

[mercer_91]

Crucial detail everyone's missing: they managed to siphon $4M before automated security caught it - that's the real concern here.

 

[gas.95]

so withdrawal system is actually working now? anyone tested?

 

[nataly.k]

so withdrawal system is actually working now? anyone tested?

@gas.95 just withdrew small amount (0.1 ETH) - processed in 7 mins, normal speed

 

[FredJefferson87]

Can confirm @nataly.k - my stuck withdrawal just cleared too. They're definitely processing faster now.

 

[terr13]

Someone check if those KuCoin addresses were fresh or old accounts? Might help track movement...

 

[WellerD]

Initial analysis of compromised withdrawals:

• 85% under 2 ETH
• 12% between 2-10 ETH
• 3% over 10 ETH

Suggests automated small withdrawals to avoid triggers

 

[Ev.Lab]

Initial analysis of compromised withdrawals:

• 85% under 2 ETH
• 12% between 2-10 ETH
• 3% over 10 ETH

Suggests automated small withdrawals to avoid triggers

@WellerD interesting pattern. So they deliberately kept most transactions under common alert thresholds

 

[s@pphire]

@gas.95 just withdrew small amount (0.1 ETH) - processed in 7 mins, normal speed

@nataly.k what wallet did you use? web3 or their custody? trying to figure out if both working

 

[timtowin]

biggest flex is them casually topping up 3x user balances like it's nothing