Cyber Incident Victim: Naira4Dollar
Date:
Mar 2016
Location:
Nigeria
Summary
A Nigerian Bitcoin exchange suffered a theft of $15,000 worth of cryptocurrency from its blockchain.info wallet. The CEO discovered the breach upon attempting to access the newly acquired Bitcoins, intended for conversion to Perfect Money, and found the wallet emptied. Despite immediate efforts to contact the wallet provider and halt the unconfirmed transaction, the funds were irreversibly transferred to the attacker’s account. The platform confirmed no recourse for recovery existed, resulting in complete loss of the assets. The incident highlighted challenges in securing and reversing unauthorized blockchain transactions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 15, 2016, Nigerian Bitcoin exchange Naira4Dollar.com experienced a theft of $15,000 worth of Bitcoins from its blockchain.info wallet. The incident occurred after CEO Ejezie Sunday purchased the Bitcoins to replenish stock, intending to convert them to Perfect Money due to unavailability of the latter currency. Upon returning to his office, Sunday logged into the company's wallet and discovered the Bitcoins missing, prompting him to exclaim they'd been hacked. He observed the unauthorized transaction was still unconfirmed at that moment and immediately attempted to contact blockchain.info to halt the transfer. Despite his efforts, Sunday received no prompt response from the service provider and lacked alternative methods to intervene. He subsequently witnessed the transaction's confirmation process completing, resulting in all funds being irrecoverably transferred to the attacker's wallet. The stolen amount represented a significant financial loss equivalent to 4,575,000 Nigerian Naira at the time.
Blockchain.info eventually responded to Sunday's inquiry but stated they could take no action to recover the stolen assets. The CEO described the experience as profoundly shocking, emphasizing his helplessness during the confirmation period. The theft directly impacted the exchange's operational capacity by depleting its cryptocurrency reserves. No additional technical details about the attack vector or hacker identification were disclosed in available reports. Financial repercussions were confined to the direct loss of the $15,000 Bitcoin purchase, with no evidence suggesting customer funds or other systems were compromised. The incident underscored challenges in reversing blockchain transactions once confirmed, leaving the exchange without recourse for financial recovery.