In June 2024, North Korea\'s Lazarus Group targeted CoinStats\'s in-app wallet. Here is exactly what happened, what was safe, and how CoinStats responded.
In June 2024, CoinStats experienced one of the most significant security incidents in the crypto app space — a targeted attack by the Lazarus Group, the North Korean state-sponsored hacking collective responsible for some of the largest crypto thefts in history. The attack specifically targeted CoinStats's in-app wallet feature, which allowed users to deposit and hold cryptocurrency within the CoinStats platform. Funds held in this feature were drained by the attackers.
What was NOT affected: the portfolio tracker core product, which connects to external exchanges via read-only API keys and monitors external wallet addresses. No exchange account funds were accessed. No API keys were compromised. CoinStats published a detailed incident report within 10 days and completed a system rebuild within 11 days — a response that was widely praised for its transparency.
Track, swap, earn, and stay informed — CoinStats goes beyond portfolio tracking to a full crypto management hub.
CoinStats is free for basic portfolio tracking. Premium starts at $3.99/month for serious investors.
Connect your exchanges and wallets — CoinStats does the rest automatically.
The Lazarus Group attack targeted the in-app custodial wallet — not the portfolio tracker. If you never deposited crypto into CoinStats\'s built-in wallet, you were not affected.
CoinStats published a detailed post-mortem publicly. Reading it provides transparency on exactly what happened and what measures were taken.
If you used the CoinStats in-app wallet feature to hold funds during June 2024, you may have been affected. Contact CoinStats support to assess your specific situation.
Ensure any API keys you gave CoinStats are still read-only only. As a precaution, you can revoke and recreate them.
For portfolio tracking only (read-only APIs, public wallet addresses): the risk profile is similar to other tracker apps. For in-app wallet use: consider established self-custody alternatives.
1.2M+ users track their crypto with CoinStats. 300+ integrations, 100+ blockchains, live P&L, and in-app swapping.
Get CoinStats Free →"Had funds in the CoinStats wallet during the June 2024 incident. The experience was stressful. CoinStats\'s communication was better than expected given the situation. Now using CoinStats for tracking only with read-only APIs."
"The Lazarus Group targeting CoinStats is not a reflection of the company\'s security inadequacy alone — this group has successfully compromised much larger targets. The published incident report meets a high standard of transparency for the industry."
"Never used the in-app wallet — was entirely unaffected. The tracking product continued working through the entire incident. If you only use CoinStats for read-only tracking, the 2024 hack had zero impact."
300+ exchanges, 100+ blockchains, 20,000+ coins — free to start, upgrade anytime.
Start Free →