User Loses $750,000 in BTC After Google Sync Compromise

A BTC holder lost $750,000 after a hacked Google account allowed unauthorized access to their CEX via cloud sync. The incident highlights risks of linking identity providers to exchange logins.

Woofun AI reports that a Bitcoin user transferred assets from a Coldcard MK4 hardware wallet to a centralized exchange to mitigate theft risks. Within 12 hours, the user's Google account was compromised, enabling an attacker to bypass security via Google Account Verification and drain approximately $750,000 in BTC.

GoPlus indicates that such breaches typically exploit social engineering phishing, credential stuffing, or malicious extensions rather than brute-force attacks. Common vectors include phishing for Google credentials, stealing cookies via malware, reusing weak passwords, or hijacking email and phone numbers to reset access.