Multiple users of the multichain crypto wallet BitKeep reported that funds in their wallets were stolen over the weekend.
BitKeep said in its Telegram channel that the hack appears to have affected users who downloaded unofficial versions of the app.
“Dear BitKeep users, after preliminary investigation by the team, it is suspected that some APK package downloads have been hijacked by hackers and installed with code implanted by hackers. If your funds are stolen, the application you download or update may be an unknown version (unofficial release version) hijacked,” BitKeep said.
The company recommends that users who downloaded the APK version transfer the funds to the wallet downloaded from another official store (App Store or Google Play), and use the newly created wallet address, as the address created through the trojanized APK may have been compromised.
While BitKeep did not reveal how much money was stolen in the incident, transaction tracking service PeckShield estimates that approximately $8 million worth of assets have been stolen so far, including ~4373 $BNB, 5.4M $USDT, 196k $DAI, and 1233.21 $ETH.