Share this article

Kraken Reveals Security Vulnerabilities in Bitcoin ATMs

The machines’ manufacturer has released patches to mend the problem, but more revisions may be needed.

(Angel Garcia/Bloomberg via Getty Images)
(Angel Garcia/Bloomberg via Getty Images)

A commonly used model of bitcoin ATMs has several software and hardware vulnerabilities, Kraken Security Labs revealed in a blog post yesterday.

  • The security team notified the manufacturer, General Bytes, on April 20 of the attack vectors. General Bytes has released patches for the back-end system, but some fixes may require hardware revisions, Kraken said.
  • Bitcoin ATMs allow users to buy bitcoin using fiat currency. General Bytes is the second-largest manufacturer of Bitcoin ATMs, representing 22.7% of the global market, according to information provider Coin ATM Radar.
  • The model in question, the BATMtwo (GBBATM2), had several vulnerabilities, according to Kraken, including a default administrative QR code, the underlying Android operating software, the ATM’s management system and the machine’s hardware case.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

Read more: Crypto ATM Installations Have Increased Over 70% This Year

Eliza Gkritsi

Eliza Gkritsi is a CoinDesk contributor focused on the intersection of crypto and AI, having previously covered mining for two years. She previously worked at TechNode in Shanghai and has graduated from the London School of Economics, Fudan University, and the University of York. She owns 25 WLD. She tweets as @egreechee.

Eliza Gkritsi
Kraken Reveals Security Vulnerabilities in Bitcoin ATMs