BitPay Copay
Hack or exploit on Nov 27, 2018 · Malicious Code Injection Attack
What happened
American Bitcoin payment processor BitPay stated that the company's Copay wallet was attacked by hackers. Bitpay announced on Monday that it learned of this issue from a report on Copay GitHub. The report showed that third-party JavaScript libraries used by these applications were modified and malicious code was loaded. The malware was inserted into versions 5.0.2 to 5.1.0 of the Copay and BitPay wallet applications and may be used to obtain private keys for stealing Bitcoin and Bitcoin Cash. According to reports, the attack appeared to be carried out by a developer named Right9ctrl, who took over the maintenance of the NodeJS library from the left manager. About three months ago, when Right9ctrl was granted access to the repository, he inserted malware at this time.
Details
- Date
- Nov 27, 2018
- Kind
- Hack or exploit
- Method
- Malicious Code Injection Attack
- How in
- Keys, accounts and infrastructure
- Target
- Wallet
- Chains
- not stated
Reported by
SwanBluechip, "BitPay Copay hack, Nov 27, 2018: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht5622e9cbff/ (data as of 2026-10-31).