Mask Founder Confirms Hack, Loses $4 Million In Crypto

Barely hours after turning 29, Mask founder suffers a massive security breach, losing nearly $4 million worth of cryptocurrencies.
By Aliyu Pokima
CoinMarketCap Hack Fixed

Highlights

  • Mask founder confirms staggering crypto theft to the tune of $4 million
  • Early investigations reveal manual transactions originating from the founder's hacked mobile phone.
  • The attack comes on the heels of jarring hacks rocking the ecosystem over the last two weeks.

As the cryptoverse begins to pick itself up from jarring breaches, Mask founder Suji Yan is the latest victim of a calculated attack. Yan confirmed the loss of $4 million worth of assets with the stolen asset swapped to Ethereum (ETH) and moved to multiple addresses.

Advertisement
Advertisement

Mask Founder Loses $4 Million In Crypto On His Birthday

One week after the Bybit hack, Suji Yan, founder of Web 3 browser extension Mask has confirmed the loss of $4 million worth of cryptocurrencies in a security breach. The attack was targeted at a public wallet on the phone of the Mask founder with early analysis pointing to an offline attack.

In his confirmation, Yan says that the malicious transaction appears to be manual, taking place over 11 minutes. The mask founder is not ruling out the possibility of a private key leak, noting that the transactions happened during a bathroom break on his birthday.

“I was in a private gathering with a dozen friends and my phone was away for some minutes when I was using the restroom,” said Yan. “I trust my friends but this a nightmare for everyone.”

Advertisement
Advertisement

Attacker Moved Stolen Funds To Multiple Addresses

An early report by Web 3 security firm Cyvers disclosed that the Mask hack attacker moved several assets including ETH, USDT, WETH, and MASK to a single address. Upon receipt of the funds, the attacker converted the stolen funds to ETH and transferred them to six different addresses.

The embattled Mask founder has announced an investigation into the theft, tapping SlowMist and ZachXBT to lead the recovery. Yan is also cooperating with law enforcement agencies to resolve the issue, pledging to reserve comments till a formal report is available.

Unlike malicious code in Safe Wallet in Bybit’s hack, Yan says the attack is most likely an offline case involving a trust breach.

“I hope if this is the offline case – you should confront me directly,” said Yan. “Crypto is not a dark forest and I will not let it be.”

Amid the security breaches, a massive BTC price dip is dampening the enthusiasm of investors as they scan the horizon for a rally.

Advertisement
Aliyu Pokima
Aliyu Pokima is a seasoned cryptocurrency and emerging technologies journalist with a knack for covering needle-moving stories in the space. Aliyu delivers breaking news stories, regulatory updates, and insightful analysis with depth and precision. When he's not poring over charts or following leads, Aliyu enjoys playing the bass guitar, lifting weights and running marathons.
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.