Skip to main content
AVOID.NET
Sign in

CoinStats

avoid.net/coinstats→35/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5Zzf6F…L9Zp

Summary

CoinStats is an Armenian-founded cryptocurrency portfolio tracking application with approximately 1.5 million users, founded in 2017 by Narek Gevorgyan. On June 22, 2024, the platform suffered a significant security breach in which 1,590 internally-hosted wallets were compromised and approximately $2.2 million in cryptocurrency was stolen, with attribution pointing to North Korea's Lazarus Group. The platform has since rebuilt its infrastructure and restored operations, but no confirmed compensation program for affected users has been publicly documented.

Connected Entities

6 entities · 60 linked investigations
Organizations
□Ronin Network22□North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign0□ZachXBT82
Tokens
♦DMM Bitcoin52♦CoinStats♦Cointelegraph62
Relationships
  • Cointelegraph→mentioned with→ZachXBT(70%)
  • CoinStats→mentioned with→DMM Bitcoin(80%)
  • CoinStats→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Ronin Network→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • ZachXBT→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • CoinStats→mentioned with→Ronin Network(80%)
  • CoinStats→mentioned with→Cointelegraph(60%)
  • CoinStats→mentioned with→ZachXBT(60%)
  • DMM Bitcoin→mentioned with→ZachXBT(70%)
Also appears in
Ronin Network·22DMM Bitcoin·52North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign·0StableMagnet·2Dean Daghita / CMDSS (Command Services and Support)·0Nexera·32SafePal·42Playsomo·60BearnFi·12Gurhan Kiziloz·0+ 50 more

Connected Through

6 shared actors · 559 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about CoinStats?

Timeline(10 events)

2017

CoinStats founded in Yerevan, Armenia by Narek Gevorgyan as a personal crypto portfolio tracking tool.

2021

CoinStats reports 1.2 million monthly active users and sixfold revenue growth; raises $3.2 million in early funding.

22 June 2024

Security breach detected at approximately 18:00 UTC. Attackers gain access to AWS infrastructure and HashiCorp Vault via a socially engineered employee. 1,590 internal wallets compromised. Malicious push notification sent to iOS users directing them to a drainer site. Platform taken offline.

22 June 2024

Blurr.eth's wallet drained of 3,657 MKR tokens (~$8.7M). Hacker liquidates MKR on-chain, causing a 7% MKR price drop.

22 June 2024

CoinStats publicly discloses breach via X (Twitter) and urges users with internally-created wallets to transfer funds immediately.

24 June 2024

CoinStats partially restores platform operations with enhanced security measures.

25 June 2024

On-chain analysts observe approximately 211 ETH (~$1M) transferred from attacker wallets to Tornado Cash mixer.

3 July 2024

CoinStats announces full platform restoration; all functionalities operational.

12 July 2024

CoinStats publishes formal security incident report attributing attack to Lazarus Group or a related nation-state actor. Reports $2.2M in total losses across 1,590 wallets. Announces victim registration form with August 15 deadline for compensation eligibility consideration.

15 August 2024

Deadline for affected users to submit information to CoinStats for potential future compensation consideration.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain14 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 17 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:31 AM

last updated: 8/30/2026, 8:30:06 PM

5 views

avoid.net — verified advice for a post-truth world