Unknown hacker steals cryptocurrency from MetaMask — developers don’t know how

Cryptocurrency investors have lost more than 5000 ETH (more than $ 10.5 million at the current exchange rate) due to an unknown MetaMask hack. According to one of the developers of the crypto wallet, who goes by the pseudonym @tayvano_, it is not yet known how the exploit works.

According to @tayvano_, the attacker only targets investors with a long and rich history of cryptocurrency transactions. MetaMask users were identified based on the pattern of online transactions. It is still unclear whether the attacker is working alone or has a team of accomplices. Since December last year, he has managed to steal cryptocurrency from 11 different blockchains.

One of @tayvano_'s theories is that the hacker somehow managed to get a large amount of data from the victims' computers. However, it is unclear exactly how the attacker selects victims for the attack and what exactly the hack is. Metamask’s official Twitter account noted that the problem is not related to an exploit in MetaMask, and the source of the vulnerability is currently being investigated.

As a reminder, a few days ago, MetaMask customers fell victim to a phishing attack that resulted in unauthorized access to users' personal information. According to ConsenSys, MetaMask’s parent company, the phishing attack was carried out through a third-party service provider that provides technical support to customers.