CoinStats
Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 56 → 63. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -3.2 |
| Incidents it suffered (e.g. hacks) | -6.4 |
| Problems around it, caused by others | -2.4 |
| Long-running | +10 |
| Sum | 63 |
- 3 sections set aside: the claims did not hold up in a fact-check, pending correction.
Score: 63/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-02 · 3 of 9 claims confirmed · 3 need better sources · 2 disputed · 1 out of date
anchored·5Zzf6F…L9ZpSummary
CoinStats is an Armenian-founded cryptocurrency portfolio tracking application with approximately 1.5 million users, founded in 2017 by Narek Gevorgyan. On June 22, 2024, the platform suffered a significant security breach in which 1,590 internally-hosted wallets were compromised and approximately $2.2 million in cryptocurrency was stolen, with attribution pointing to North Korea's Lazarus Group. The platform has since rebuilt its infrastructure and restored operations, but no confirmed compensation program for affected users has been publicly documented.
Connected Entities
6 entities · 60 linked investigations- Cointelegraph→mentioned with→ZachXBT(70%)
- CoinStats→mentioned with→DMM Bitcoin(80%)
- CoinStats→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
- Ronin Network→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
- ZachXBT→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
- CoinStats→mentioned with→Ronin Network(80%)
- CoinStats→mentioned with→Cointelegraph(60%)
- CoinStats→mentioned with→ZachXBT(60%)
- DMM Bitcoin→mentioned with→ZachXBT(70%)
Connected Through
6 shared actors · 507 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □ZachXBTorganization
- □North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaignorganization
- ♦Cointelegraphtoken
- □Ronin Networkorganization
Timeline(10 events)
2017
CoinStats founded in Yerevan, Armenia by Narek Gevorgyan as a personal crypto portfolio tracking tool.
2021
CoinStats reports 1.2 million monthly active users and sixfold revenue growth; raises $3.2 million in early funding.
22 June 2024
Security breach detected at approximately 18:00 UTC. Attackers gain access to AWS infrastructure and HashiCorp Vault via a socially engineered employee. 1,590 internal wallets compromised. Malicious push notification sent to iOS users directing them to a drainer site. Platform taken offline.
22 June 2024
Blurr.eth's wallet drained of 3,657 MKR tokens (~$8.7M). Hacker liquidates MKR on-chain, causing a 7% MKR price drop.
22 June 2024
CoinStats publicly discloses breach via X (Twitter) and urges users with internally-created wallets to transfer funds immediately.
24 June 2024
CoinStats partially restores platform operations with enhanced security measures.
25 June 2024
On-chain analysts observe approximately 211 ETH (~$1M) transferred from attacker wallets to Tornado Cash mixer.
3 July 2024
CoinStats announces full platform restoration; all functionalities operational.
12 July 2024
CoinStats publishes formal security incident report attributing attack to Lazarus Group or a related nation-state actor. Reports $2.2M in total losses across 1,590 wallets. Announces victim registration form with August 15 deadline for compensation eligibility consideration.
15 August 2024
Deadline for affected users to submit information to CoinStats for potential future compensation consideration.
Decision Log
- slot 464459662 · hash 5TS4KfyfHWpEevBwuRSQFyxTPb6Ecu6QbURvEKvDGeC9
- slot 464459657 · hash CXoQAC33tRHNk8gNbfTKdnNat3VFfvkfWdNnhmRT3HvX
- slot 464459652 · hash J4NpjBS8LkesRpxaFYFLaY6KNPLdj9D31ZLhnGaedyEz
- slot 455367655 · hash 5pM4SMphMJ8hkH8HHJ41iU6WRHoNz33zVqNwi4xgvSzg
- slot 422643187 · hash 5NMqca22rKwbGwU25Y2XecsXRpiQVdnqBDKRhAMvCFVh
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 14 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:31 AM
last updated: 11/2/2026, 10:20:30 AM
5 viewsavoid.net — verified advice for a post-truth world