As much as $23 million worth of crytocurrency may have been stolen in a recent hack of Christchurch-based Cryptopia, according to an analysis from New York-based blockchain infrastructure firm Elementus.
Police were advised last week of an issue involving potential unauthorised transaction activity after Cryptopia announced it had suffered a security breach which resulted in significant losses.
According to Elementus, data on the Ethereum public blockchain indicates that funds began to be siphoned from Cryptopia's two core wallets — one holding ETH, the other tokens — on the morning of January 13.
Elementus calculates that just under US$3.6m ($5.3m) in ETH was stolen, about US$2.4m of Dentacoin, almost US$2m in Oyster Pearl, and about US$3m in unspecified other tokens.
"The funds were taken from more than 76,000 different wallets, none of which were smart contracts. The thieves must have gained access to not one private key, but thousands of them," Elementus analyst Max Galka wrote on a blog.