Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Security researchers including MetaMask's Taylor Monahan and Unciphered's Nick Bax say they have linked more than 150 cryptocurrency theft victims, who lost over $35 million, to a common cause: storing their seed phrases in LastPass. Monahan said the victims were longtime crypto investors and security-minded people who did not show the email or phone compromises that typically precede such heists. Bax said the thefts moved funds to the same blockchain addresses, which connects the victims, and that the attacks have occurred at roughly two to five high-dollar heists per month since December 2022. LastPass declined to answer questions about the research, citing an ongoing law enforcement investigation and pending litigation over its November 2022 breach, which exposed password vaults for more than 25 million users.