Verify a decision

{"actor":"system:backfill","investigation_id":"d229b3c8-9a81-48e9-b174-61d3bec051bc","kind":"publish","page_slug":"stakecom","published_at":"2026-05-20T18:22:05.698Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Stake.com","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://en.wikipedia.org/wiki/Ed_Craven"},{"credibility":3,"name":"","type":"other","url":"https://en.wikipedia.org/wiki/Bijan_Tehrani_(entrepreneur)"},{"credibility":3,"name":"","type":"other","url":"https://fincrimecentral.com/stake-multi-billion-gambling-empire/"},{"credibility":3,"name":"","type":"other","url":"https://coincub.com/blog/curacao-gaming-license/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://hacken.io/discover/stake-com-hack-sep-2023/"},{"credibility":3,"name":"","type":"other","url":"https://www.bleepingcomputer.com/news/security/crypto-casino-stakecom-loses-41-million-to-hot-wallet-hackers/"},{"credibility":3,"name":"","type":"other","url":"https://www.dlnews.com/articles/defi/stake-co-founder-says-hacker-did-not-compromise-private-keys/"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/crypto-casino-stake-resume-services-hours-after-hack"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-stake-com-hack-september-2023"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://hacken.io/discover/stake-com-hack-sep-2023/"},{"credibility":3,"name":"","type":"other","url":"https://www.trmlabs.com/resources/blog/fbi-confirms-that-north-korea-was-behind-41-million-stake-com-exploit"},{"credibility":3,"name":"","type":"other","url":"https://medium.com/@0xscope_labs/0xscope-research-tracking-the-stake-com-hack-f73ffe52270b"},{"credibility":3,"name":"","type":"other","url":"https://blog.merklescience.com/hacktrack/stake-suffers-38-million-hack"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/policy/2023/09/07/north-koreas-lazarus-hackers-stoke-41-million-from-crypto-gambling-site-fbi-says"},{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/155360/fbi-says-north-koreas-lazarus-group-was-behind-41-million-stake-hack"},{"credibility":3,"name":"","type":"other","url":"https://www.securityweek.com/fbi-blames-north-korean-hackers-for-41-million-stake-com-heist/"},{"credibility":3,"name":"","type":"other","url":"https://www.trmlabs.com/resources/blog/fbi-confirms-that-north-korea-was-behind-41-million-stake-com-exploit"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/crypto-casino-stake-resume-services-hours-after-hack"},{"credibility":3,"name":"","type":"other","url":"https://casinobeats.com/2023/09/05/stake-resumes-operations-41m-hack/"},{"credibility":3,"name":"","type":"other","url":"https://medium.com/@edcraven22/always-moving-forward-reflections-on-the-recent-stake-com-exploit-431105710a2e"},{"credibility":3,"name":"","type":"other","url":"https://www.dlnews.com/articles/defi/stake-co-founder-says-hacker-did-not-compromise-private-keys/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom"},{"credibility":3,"name":"","type":"other","url":"https://fincrimecentral.com/stake-multi-billion-gambling-empire/"},{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/how-the-lazarus-group-is-stepping-up-crypto-hacks-and-changing-its-tactics"},{"credibility":3,"name":"","type":"other","url":"https://coincub.com/blog/curacao-gaming-license/"}]}],"sources_used":[],"summary":"Stake.com is a Curaçao-licensed cryptocurrency gambling and sports betting platform co-founded in 2017 by Australians Ed Craven and Bijan Tehrani, operating as one of the largest crypto casinos globally with reported 2024 revenue of $4.7 billion. On September 4, 2023, the platform suffered a critical security breach in which approximately $41.35 million in cryptocurrency was drained from its hot wallets across Ethereum, BNB Smart Chain, and Polygon networks; the FBI formally attributed the attack to North Korea's Lazarus Group (APT38) within 48 hours. Stake.com restored full operations within five hours of the incident and stated that user funds were not affected, though the root cause — a likely hot wallet private key compromise — has never been officially confirmed by the company.","timeline":[{"date":"2013-01-01","event":"Ed Craven and Bijan Tehrani launch Primedice, a cryptocurrency dice game, establishing their first crypto gambling venture.","source":""},{"date":"2016-01-01","event":"Craven and Tehrani found Easygo, an online casino games studio, as the corporate precursor to Stake.com.","source":""},{"date":"2017-08-01","event":"Stake.com launched as a crypto casino and sports betting platform under Curaçao license, operated by Medium Rare N.V.","source":""},{"date":"2023-09-04","event":"Stake.com hot wallets on Ethereum, BNB Smart Chain, and Polygon drained of approximately $41.35 million in a multi-chain attack detected internally within 20 minutes.","source":""},{"date":"2023-09-04","event":"Stake.com restores full deposit and withdrawal operations approximately five hours after the breach; Ed Craven states user funds are safe.","source":""},{"date":"2023-09-06","event":"FBI issues formal press release attributing the $41 million theft to North Korea's Lazarus Group (APT38), publishing 40 associated blockchain addresses.","source":""},{"date":"2023-09-07","event":"TRM Labs publishes on-chain analysis corroborating FBI attribution, documenting multi-chain laundering patterns consistent with Lazarus Group TTPs.","source":""},{"date":"2023-09-10","event":"Ed Craven publishes post-incident reflections on Medium; states private keys were not directly compromised and that Stake absorbed the loss without material operational impact.","source":""},{"date":"2024-12-24","event":"Curaçao's new National Ordinance on Games of Chance (LOK) enters into force, replacing the sublicense model and introducing direct CGA supervision of operators including Stake.com.","source":""}]},"v":1}