Decentralized finance wallet BitKeep has become a target for hackers as users reported millions of dollars of losses in crypto.
Analysts at PeckShield said in a tweet post that users might have downloaded a hacked APK version. As a result of the attack, bad actors have stolen over 4370 BNB, almost $5.5 million in USDT, $196,000 in DAI, and over 1233 in ETH.
An official Telegram page for BitKeep said in a post that "some APK package downloads have been hijacked by hackers and installed with code implanted by hackers." The post continues:
"If your funds are stolen, the application you download or update may be an unknown version (unofficial release version) hijacked."
It is unclear how hackers succeeded to scam so many users with a hijacked APK package. A spokesperson for BitKeep has called on users to transfer the funds to the wallet downloaded from official store (App Store or Google Play).
Researchers at Hacken say the attack is still ongoing and the attacker is "directly transferring users assets to multiple addresses."
BitKeep is a multi-chain non-custodial DeFi wallet launched in 2018. The wallet raised $15 million from 11 investors, including KUCOIN Ventures and Matrixport.
