Skip to content
July 21, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Cyber Security
  • Bitcoin Gold Hacked: Lose $18 Million
  • Cyber Security

Bitcoin Gold Hacked: Lose $18 Million

Do Son May 28, 2018 3 minutes read
Add Daily CyberSecurity as a preferred source on Google

Bitcoin Gold’s development team recently announced details of the attacks last week. At that time, the attacker stole money from the cryptocurrency exchange through “51% attacks” to perform “double spend” attacks.

What is a Double-Spend?

This is an attempt to spend the same coins twice – for example, the attacker might send a deposit to an Exchange wallet, and then sending those same coins to another wallet of their own at the same time. This is normally resolved on a blockchain when transactions are added to blocks – when added to blocks, the transactions are put in an order. The payment which came first will be valid, and the transaction which came second will be ignored – even if the transactions were sent at the exact same time, the order of transactions in a block is clear. This way, the coins can only be sent to one place – either to the Exchange, or to the private wallet.

What is a 51% attack?

An attacker that controls more than 50% of the network’s computing power can, for the time that he is in control, exclude and modify the ordering of transactions.

Bitcoin Gold’s development team confirmed that the attackers gained most of the power of network computing power and used these calculations to restructure Bitcoin’s gold blockchain and conduct reverse transactions.

In this incident, the attacker deposits funds into a cryptocurrency exchange transacts it into Bitcoin or other cryptocurrencies and then withdraws funds. Subsequently, the attacker used most of the acquired power to force other parts of the network to accept forged data blocks, modify the initial deposit funds, and cause these funds to disappear from the exchange-controlled wallet.

According to previous reports, the address associated with the attacker sent more than 380,000 Bitcoin gold to itself in a series of “double spending behavior” transactions. It is not yet clear how many of these transactions resulted in a theft of funds. Theoretically, if all transactions result in theft of funds, the attacker can profit from $18 million.

The project’s developers stated that the attack was partly because Bitcoin’s gold mining algorithm “Equihash” was also used by other cryptocurrencies, resulting in a larger computing pool than the Bitcoin gold network.

Bitcoin Gold has planned to migrate to the new algorithm. Earlier, mining hardware manufacturer Bitland announced that the first Equihash AISC mining machine has begun to accept bookings. According to developers, migrating to new algorithms can significantly increase the security of the network.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.


We respect your inbox. Unsubscribe anytime.

Related coverage

  • Europol Cracks Down on European Document Forgery and Smuggling Ring
  • Beyond Phishing: Iranian-Aligned Group Abuses Omani Mailbox to Spy on Diplomats
  • Chinese hackers use new malware to attack the U.K government
  • Lazarus Group Exploits Microsoft Zero-Days CVE-2024-38193, Patch Urgently
  • Cyber Tradecraft Revealed: Hamas, TAG-63, and the Spoofed Domains
Track all actively exploited CVEs →

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Bitcoin Gold

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intel📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intel📅 Updated: Jul 21, 2026
  • CVE-2026-6875CVSS 9.5
    ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
    Admin intel📅 Updated: Jul 18, 2026
  • CVE-2026-39808CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
  • CVE-2026-25089CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
  • CVE-2026-58644CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    CISA KEV📅 Added to KEV: Jul 16, 2026
  • CVE-2023-4346CVSS 7.5
    KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to...
    CISA KEV📅 Added to KEV: Jul 15, 2026
  • CVE-2026-53362
    In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation...
    Admin intel📅 Updated: Jul 14, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-64625CVSS 9.8
    AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps...
  • CVE-2026-53595CVSS 9.4
    FreeScout is a free help desk and shared inbox built with PHP's...
  • CVE-2026-44231CVSS 9.1
    RT is an open source, enterprise-grade issue and ticket tracking system. Versions...
  • CVE-2026-63766CVSS 9.8
    GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where...
  • CVE-2026-63767CVSS 9.8
    ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization...
  • CVE-2026-39878CVSS 9.3
    Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vulnerability...
  • CVE-2026-60034CVSS 9.4
    The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised...
  • CVE-2026-60032CVSS 9.4
    The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload,...
  • CVE-2026-54051CVSS 9.9
    Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent...
  • CVE-2026-41252CVSS 9.8
    xrdp is an open source RDP server. Versions 0.10.6 and prior contain...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.