Blink released an attack review and is offering a reward of up to 3.3 BTC

According to Bitcoin News monitoring, Blink released a complete review of the attack incident on September 19: this attack resulted in a total of 6.61 BTC stolen from 24 customer accounts. The company stated that the vulnerability has existed since October 2023, and any user with a free Blink account could potentially gain customer service-level access, take over customer accounts, and increase withdrawal limits.

The attackers also obtained partial information from 3,817 accounts, including some phone numbers and email addresses; names, identification documents, addresses, passwords, and mnemonic phrases were not leaked. The 24 stolen accounts had not enabled two-factor authentication. The attackers attempted 18 withdrawals from 9 accounts that had two-factor authentication protection, all of which were unsuccessful. Blink shareholders have fully compensated all affected customers. Approximately 5 stolen BTC were subsequently transferred via cross-chain exchange services. Blink is now offering a reward of up to about 3.3 BTC for recovery, with half of any successfully recovered funds to be allocated to those providing valid leads and the Bitcoin circular economy.