A third-party discussion forum platform running on LocalBitcoins was compromised and used to phish user credentials including 2FA codes. Attackers gained access to six user accounts and transferred 7.9 BTC before the forum was disabled.

LocalBitcoins has detected a security vulnerability - an unauthorised source was able to access and send transactions from a number of affected accounts.It was related to a feature powered by a third party software, and stop the attack. At the moment, we are determining the correct number of users affected - so far six cases have been confirmed.