A security breach has occurred in Monero’s community crowdfunding wallet, resulting in the loss of 2,675.73 XMR (worth nearly $460,000). The cause and source of the breach remain unknown. The incident took place on September 1 but was only disclosed on GitHub on November 2 by Monero’s developer Luigi. The CCS wallet, used for funding development proposals, was drained completely, while the hot wallet for contributor payments remained untouched. Monero’s core team is seeking support from the General Fund to cover liabilities. The breach may be related to previous attacks and compromised keys. The possibility of the wallet keys being available online on the Ubuntu server is also being considered.
