CoinStats Suffers Security Breach, iOS and Android Users Targeted with Scam Notifications

CoinStats suffered a security breach late into Saturday as iOS and Android users reported receiving questionable notifications about them being eligible for rewards.

CoinStats users were left baffled on Saturday after receiving notifications about being eligible for rewards, only to find out that the notifications were part of a scam. The notifications took users to a shady website that asked them to download another application to receive the rewards.

CoinStats later confirmed that it was indeed experiencing a security incident affecting wallets created directly within CoinStats. The post also asked users to move their funds “ASAP” if they had their private keys exported.

The security issue only affected users who used wallets natively created on CoinStats, not wallets from external providers connected to it. A few hours after its post confirming the breach, CoinStats posted again to let its users know that “The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident.”

It also mentioned its security team acted quickly, thanks to which only “1.3% of all CoinStats Wallets were affected, totaling 1,590 wallets.” It further linked a Google Doc in the post, displaying wallets affected by the breach so those impacted could move their funds elsewhere.