Bovada

Bovada, also known as Ignition, operates as an online gambling platform headquartered in Costa Rica. It provides services primarily focused on sports betting and casino games accessible to users internationally. The platform relies on third-party payment processors to handle financial transactions, particularly cryptocurrency deposits and withdrawals. One significant incident impacting Bovada involved a security breach not directly against its own systems but against Alphapo, a cryptocurrency payment provider it utilized. This incident severely disrupted Bovada's withdrawal services and highlighted its dependence on external financial infrastructure partners.

In July 2023, Alphapo suffered a major cyberattack resulting in losses exceeding $60 million stolen from its hot wallets across multiple blockchain networks. As a service provider to Bovada and other gambling platforms, this breach directly affected Bovada's operations. Alphapo was forced to migrate deposits to new wallet addresses while attempting to verify funds sent to the compromised old addresses. On-chain forensic analysis suggested the sophisticated attack exhibited transaction patterns potentially linking it to the Lazarus Group, a North Korean state-affiliated hacking collective known for targeting cryptocurrency assets. This event underscored systemic vulnerabilities inherent in managing private keys for hot wallets and the broader security risks associated with relying on third-party payment processors within the cryptocurrency ecosystem servicing online gambling.