General Bytes' Bitcoin ATM cloud service was compromised through a zero-day vulnerability in the master service interface. Attackers uploaded malicious Java applications to decrypt API keys, accessed hot wallet funds, and stole user credentials by scanning private keys entered at ATMs.

According to the official Twitter, the General Bytes encrypted currency ATM service was attacked on March 17 and 18. The attacker used the upload interface in the system to upload and run a malicious Java program, and then the attacker obtained the permissions of the database in the server and Hot wallet withdrawal API Key. According to SlowMist MistTrack, the loss was about $1.8 million.