Hackers behind Cryptocurrency Casino Stake’s $41 Million Hack Move $328 Million in Tokens

Cryptocurrency casino Stake recently fell victim to a massive hack, resulting in the theft of $41 million. The hackers responsible for this breach have now made another move, transferring a staggering $328,000 worth of Polygon (MATIC) and Binance Coin (BNB) tokens. This article delves into the details of this recent transfer, explores its connection to previous transfers, investigates the mechanics of the hack, identifies the suspected culprits, and examines the growing toll of cryptocurrency hacks on the industry.

Details of the Recent Transfer

In an audacious move, the hackers shifted a significant sum of funds. Specifically, they transferred $328 million worth of Polygon (MATIC) and BNB (BNB) tokens. Among the transferred tokens, 300 BNB worth approximately $61,500 were sent to an externally owned address. Additionally, 520,000 MATIC tokens, valued at over $266,000, were moved to Avalanche seven hours earlier. These transferred funds supplement the $4.5 million the hackers previously siphoned on Sept. 7, which were then bridged to the Bitcoin blockchain.

Connection to Previous Transfers

Through their intricate process, the hackers have funneled the funds via Avalanche to Bitcoin, where they currently reside. This recent transfer adds to the already stolen $4.5 million, resulting in a total of $4.8 million appropriated by the hackers. However, this amount represents only a meager 1.2% of the initial $41 million stolen, underscoring the magnitude of this audacious theft.

Details of the Hack

The hackers successfully gained access to the private keys of Stake’s Binance Smart Chain and Ethereum hot wallets. This breach facilitated their ability to carry out the theft, resulting in a substantial financial loss for Stake and its users. With such detailed access to the cryptocurrency casino’s wallets, the hackers exploited the vulnerabilities and orchestrated a massive heist.

Suspected Culprits

According to the United States Federal Bureau of Investigation (FBI), the Lazarus Group, a notorious cybercriminal organization associated with North Korea, is the primary suspect behind this exploit. The Lazarus Group has a history of conducting high-level cyberattacks, often targeting cryptocurrency-related platforms. This attribution adds further depth to the investigation and raises concerns about the involvement of nation-state actors in cybercrimes relating to cryptocurrencies.

Growing Toll of Cryptocurrency Hacks

The Stake hack highlights the ever-increasing toll of cryptocurrency hacks and scams, which have crossed the $1 billion mark in 2023. This figure joins a long list of previous incidents, accumulating to a staggering total. CertiK previously estimated the value of these hacks and scams to be $997 million at the end of August. However, recent attacks, including the Stake hack, have pushed the figure beyond that threshold, surpassing $1 billion. This shocking statistic underscores the pressing need for enhanced security measures within the cryptocurrency industry.

The recently reported transfer of $328 million worth of tokens by the hackers responsible for the $41 million heist at Stake casino further emphasizes the audacity and sophistication of their operation. As the funds are funneled through Avalanche to Bitcoin, the industry is left grappling with the growing toll of cryptocurrency hacks. With over $1 billion lost this year alone, stakeholders must prioritize bolstering security measures to safeguard the cryptocurrency ecosystem against malicious actors. The Stake hack serves as a wakeup call, demanding collective action to fortify the industry against future breaches.

Explore more

Ethereum Tests Glamsterdam Upgrade Amid Market Volatility

The activation of the Glamsterdam upgrade on the Sepolia testnet marks a critical phase in Ethereum’s infrastructure scaling as the network tests a gas limit increase from 60 million to 200 million. This substantial expansion of the gas limit represents a calculated gamble on the robustness of current hardware, aimed at accommodating a new wave of high-throughput decentralized applications. While

How to Design and Optimize AI Prompts for Production

The shift from experimental chatbots to high-scale enterprise intelligence systems in 2026 has transformed prompt engineering from a creative writing exercise into a disciplined branch of software engineering. The most effective production prompts use structural separation to distinguish between trusted system instructions and untrusted content from user inputs or retrieved documents. When an application processes thousands of model calls against

What Are the Best Email Marketing Tools for SMBs in 2026?

Small businesses often choose Constant Contact because it offers an extensive library of templates and specialized tools for managing event registrations and ticketing directly through emails. However, the broader landscape of digital outreach has shifted significantly, transforming email from a simple messaging tool into a sophisticated infrastructure for revenue growth and long-term customer retention. In 2026, the success of a

EY Breach Exposes Goldman Sachs and Man Group Client Data

Administrative IT tickets used for routine tax services inadvertently served as a repository for sensitive client data that was eventually stolen by hackers. This security failure at Ernst & Young (EY) has sent ripples through the financial sector, as it compromised the personal information of high-net-worth individuals associated with Goldman Sachs and the London-based hedge fund Man Group. While these

New Phishing Campaign Impersonates AI Tools to Steal MFA Codes

The campaign exploits the established trust that advertising agencies place in AI tools to bypass multi-factor authentication protocols that were previously considered secure. This sophisticated operation, identified in late 2026, represents a significant shift in the threat landscape, moving away from generic banking lures and toward the highly specialized tools used by modern marketing professionals. By impersonating platforms such as