加密货币投资组合追踪器 CoinStats 因安全漏洞而关闭平台

流行的加密货币投资组合跟踪器 CoinStats 因安全漏洞而陷入困境，该漏洞暴露了用户钱包并向移动设备发送诈骗通知。

Popular cryptocurrency portfolio tracker CoinStats is investigating a security breach that exposed user wallets and sent scam notifications to mobile devices. The company has shut down its platform as a result.

流行的加密货币投资组合跟踪器 CoinStats 正在调查一个安全漏洞，该漏洞暴露了用户钱包并向移动设备发送诈骗通知。该公司因此关闭了其平台。

The breach, confirmed by CoinStats on their official social media channel, compromised a yet-to-be-determined number of user-created wallets within the app. CoinStats is urging all users who created wallets on their platform to immediately transfer their crypto holdings to minimize potential losses.

CoinStats 在其官方社交媒体渠道上证实了此次违规行为，该违规行为导致应用程序内用户创建的钱包数量尚未确定。 CoinStats 敦促所有在其平台上创建钱包的用户立即转移其持有的加密货币，以最大程度地减少潜在损失。

“We are currently experiencing a security incident affecting wallets created directly within CoinStats; this does not impact externally connected wallets.

“我们目前正在经历一次安全事件，影响直接在 CoinStats 内创建的钱包；这不会影响外部连接的钱包。

If you have your private key exported, move your funds ASAP.”

如果您导出了私钥，请尽快转移您的资金。”

Phishing Scam Lures Users With Fake Rewards

网络钓鱼诈骗以虚假奖励引诱用户

The security breach involved a phishing scam. CoinStats users, particularly those on iOS devices, received notifications congratulating them on winning a substantial amount of cryptocurrency, specifically 14.2 ETH (Ethereum). Clicking the notification likely led users to a malicious website designed to steal their private keys and drain their wallets.

此次安全漏洞涉及网络钓鱼诈骗。 CoinStats 用户，尤其是 iOS 设备上的用户，收到了祝贺他们赢得大量加密货币的通知，特别是 14.2 ETH（以太坊）。单击该通知可能会将用户引导至旨在窃取其私钥并耗尽钱包的恶意网站。

These scams are becoming increasingly common. Hackers exploit user excitement surrounding the potential for quick gains in the crypto space. It’s crucial to be wary of unsolicited messages, especially those promising rewards or requiring urgent action.

这些骗局变得越来越普遍。黑客利用用户对加密货币领域快速获利潜力的兴奋感。警惕未经请求的消息至关重要，尤其是那些承诺奖励或需要采取紧急行动的消息。

Transparency Concerns Cloud The Issue

透明度问题是云的问题

CoinStats maintains that the breach only affected internal wallets created within their app. They assure users that externally connected wallets and those stored on centralized exchanges (CEX) remain secure. However, some users have reported unauthorized transactions even in their external wallets, casting doubt on CoinStats’ claims.

CoinStats 坚称，此次泄露仅影响了其应用程序中创建的内部钱包。他们向用户保证外部连接的钱包和存储在中心化交易所（CEX）上的钱包保持安全。然而，一些用户报告称，即使在他们的外部钱包中也存在未经授权的交易，这让人们对 CoinStats 的说法产生了怀疑。

The company has also been criticized for a lack of transparency. The full extent of the damage, including the number of compromised wallets and the total amount of stolen cryptocurrency, remains unknown. CoinStats has promised a detailed report on the incident but has not provided a timeframe for its release.

该公司还因缺乏透明度而受到批评。损害的全部范围，包括受损钱包的数量和被盗加密货币的总量，仍然未知。 CoinStats 承诺提供有关该事件的详细报告，但未提供发布时间表。

The CoinStats breach serves as a stark reminder of the evolving cybersecurity threats within the cryptocurrency space. As the industry continues to grow, so do the efforts of malicious actors targeting user funds.

CoinStats 的泄露事件清楚地提醒人们，加密货币领域内不断变化的网络安全威胁。随着行业的不断发展，恶意行为者针对用户资金的攻击也在不断增加。