Bitcoin ATM Security Flaws Pose Risks for Customers and Operators Bitcoin ATM Security Flaws Pose Risks for Customers and Operators

Table of Contents

• Research Reveals Exploits
• Risks to Customers and ATM Operators
• decline in US Bitcoin ATMs

In early 2024, Lamassu Industries addressed a critical vulnerability in their Bitcoin ATM machines that could have let hackers gain full control, posing risks to both customers and machine owners.

Research Reveals Exploits

Security researchers from IOActive discovered the flaws while trying to compromise Lamassu ATMs as part of an ethical hacking experiment in 2023. The IOActive team was able to exploit multiple vulnerabilities, gaining full administrative control over the machines.

Gunter Ollman, CTO of IOActive, stated that the exploits could allow attackers to view and manipulate all ATM interactions, potentially stealing Bitcoin from user wallets.

Risks to Customers and ATM Operators

Attackers could modify the user experience, tricking customers into entering sensitive information. While such attacks would be limited to individuals’ balances, they posed significant social engineering risks. Hackers could have drained funds from the ATMs or manipulated the note reader to show incorrect deposit amounts.

The unattended nature of Bitcoin ATMs made them particularly susceptible due to the severity of the vulnerabilities. Lamassu Industries issued a security patch to fix the issues before public disclosure in 2024, instructing machine owners to update their software.

decline in US Bitcoin ATMs

In 2023, the number of Bitcoin ATMs globally decreased for the first time in a decade. The decline was noted in the US, which saw fewer machines compared to 2022, while other regions observed an increase. As of last year, the US accounted for 82% of all Bitcoin ATMs worldwide, totaling 27,621 machines.

IOActive Research Report
Cointelegraph: Bitcoin ATM Vulnerability

The post Bitcoin ATM Security Flaws Pose Risks for Customers and Operators

Bitcoin ATM Security Flaws Pose Risks for Customers and Operators appeared first on Althalla.