Blink released an attack review and is offering a reward of up to 3.3 BTC

According to Bitcoin News, Blink released a complete review of the attack incident on September 19: this attack resulted in the theft of a total of 6.61 BTC from 24 customer accounts. The company stated that the vulnerability has existed since October 2023, allowing any user with a free Blink account to gain customer service-level permissions, take over customer accounts, and increase withdrawal limits.

The attackers also obtained partial information from 3,817 accounts, including some phone numbers and email addresses; names, identification documents, addresses, passwords, and mnemonic phrases were not leaked. The 24 stolen accounts had not enabled two-factor authentication. The attackers attempted to make 18 withdrawals from 9 accounts that had two-factor authentication protection, but all attempts were unsuccessful.

Blink shareholders have fully compensated all affected customers. Approximately 5 stolen BTC were subsequently transferred via cross-chain exchange services. Blink is now offering a recovery reward of up to about 3.3 BTC, with half of any successfully recovered funds to be allocated to those providing valid leads and the Bitcoin circular economy.