A banner with the logo of bitcoin is seen during the crypto-currency conference Bitcoin 2021 Convention at the Mana Convention Center in Miami, Florida, on June 4, 2021.
Marco Bello | AFP | Getty Images
Bitcoin’s price slipped again Tuesday. The reason for the move was unclear, however it may be related to concerns over security of the cryptocurrency after U.S. officials managed to recover most of the ransom paid to hackers that targeted Colonial Pipeline.
Court documents said investigators were able to access the password for one of the hackers’ bitcoin wallets. The money was recovered by a recently launched task force in Washington created as part of the government’s response to a rise in cyberattacks.
The world’s largest cryptocurrency slid nearly 8% at 6:30 a.m. ET to a price of $32,817, according to Coin Metrics data. Smaller digital coins also slumped, with ether falling 9% to $2,482 and XRP losing around 8%.
In April, 2021 was looking to be a banner year for digital assets, with bitcoin having topped $60,000 for the first time ever. But a recent plunge in crypto prices has shaken confidence in the market. Bitcoin sank to nearly $30,000 last month, and is currently down almost 50% from its all-time high.
The digital currency is now up only 14% since the start of the year, though it’s still more than tripled in price from a year ago.
U.S. recovers most of Colonial ransom
On Monday, U.S. law enforcement officials said they had seized $2.3 million in bitcoin paid to DarkSide, the cybercriminal gang behind a crippling cyberattack on Colonial Pipeline.
According to a court document, the Federal Bureau of Investigation was able to access the “private key,” or password, for one of the hackers’ bitcoin wallets. Bitcoin has often been the currency of choice for hackers demanding ransom payments to decrypt data locked by malware known as “ransomware.”
Crypto media outlet Decrypt reported there were unfounded rumors that the attackers’ bitcoin wallet had been “hacked,” an unlikely scenario.
DarkSide, which reportedly received $90 million in bitcoin ransom payments before shutting down, operated a so-called “ransomware as a service” business model, where hackers develop and market ransomware tools and sell them to affiliates who then carry out attacks.
According to blockchain analytics firm Elliptic, the seized funds represented the bulk of the DarkSide affiliate’s share of the ransom paid out by Colonial.
John Hultquist, vice president of analysis at Mandiant Threat Intelligence, called the move a “welcome development.”
“It has become clear that we need to use several tools to stem the tide of this serious problem, and even law enforcement agencies need to broaden their approach beyond building cases against criminals who may be beyond the grasp of the law,” said Hultquist.
“In addition to the immediate benefits of this approach, a stronger focus on disruption may disincentivize this behavior, which is growing in a vicious cycle,” he added.