The leading cryptocurrency betting platform Shuffle has experienced a serious data breach after its third-party customer service provider was hacked, resulting in the exposure of sensitive information for most users.
Shuffle founder Noa Dummett noted in an announcement on the X platform on Friday that the company's customer relationship management (CRM) service provider, Fast Track, suffered a data breach that led to the exposure of user data. Shuffle uses this service for "programmatic email sending and various communications with users," indicating that the content of these messages and email addresses are likely to be a major part of the leaked data.
"Unfortunately, this data breach seems to have affected the vast majority of our users," Dummett stated in the announcement. He added that the company is fully investigating the specifics of the data breach and "where this data ultimately ended up."
According to analysis, the volume of data leaked could be quite large. SimilarWeb data shows that as of the time of writing, Shuffle ranks 12,064th in global website traffic. Dummett also emphasized that the company will actively seek alternative solutions to Fast Track.
As of the time of writing, neither Dummett nor Fast Track has responded to Cointelegraph's request for comment.
Even if the data breach only exposed email addresses or customer support messages, the risks faced by cryptocurrency users are significantly higher than those of ordinary users, as attackers can weaponize this information for phishing and social engineering attacks—impersonating exchanges or wallet service providers to steal private keys or funds. Unlike traditional financial accounts, cryptocurrency transactions are irreversible once executed, meaning a successful scam could lead to complete and permanent loss of assets.
A recent typical case is the database leak incident at Discord (a gaming communication platform widely used among cryptocurrency users), where sensitive age verification data (including ID photos) of over 2.1 million users was leaked.
Last month, cryptocurrency exchange Crypto.com publicly denied having remained silent about a data breach incident involving user details that occurred in 2023.
This summer, cryptocurrency ATM operator Bitcoin Depot notified users that a data breach incident that occurred in mid-2024 had resulted in the exposure of private information for nearly 27,000 customers.
According to industry insiders, Coinbase also received notification in January of this year that an employee of an outsourcing company may have leaked customer data.
Another serious issue raised by the leak of cryptocurrency user identity data is that it exposes holders to the so-called "five-dollar wrench attack" risk. This type of attack refers to forcibly stealing the victim's crypto assets through personal threats or coercion; the term originates from a scenario depicted in an XKCD comic where a wrench is used to beat the victim into revealing their password.
At the end of August, an anti-corruption court in India sentenced 14 individuals involved in the kidnapping and cryptocurrency extortion of a businessman in Surat in 2018 to life imprisonment. SatoshiLabs founder Alena Vranova pointed out that the situation has become exceptionally severe, warning that "five-dollar wrench attacks" are on the rise, with "at least one Bitcoin holder being kidnapped, tortured, or extorted globally every week, and some cases are even worse."
Industry experts indicate that the situation has deteriorated to the point where cryptocurrency custodians are experiencing a significant increase in demand for their services due to the rising frequency of so-called "five-dollar wrench attacks" targeting cryptocurrency traders, investors, and project leaders.
The Shuffle incident reveals a recurring weak link in the cryptocurrency ecosystem—the handling of sensitive user data by centralized intermediaries—while also highlighting the urgent need for more transparent security audits and risk management practices in the industry.
Related: Identity photos of 2.1 million Discord users may have been exposed in a massive leak
Original article: “Cryptocurrency Betting Platform Shuffle Announces User Data Breach”
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
