The Trident Crypto Fund Dump: 248K Stolen Crypto Login Credentials Hit the Dark Web

HEROIC analysts identified the Trident Crypto Fund database breach in February 2020, finding that 248,948 user records had been exposed and recieved by bad actors trading the data on dark web marketplaces. The leaked information included email addresses, full names, phone numbers, IP addresses, and MD5 password hashes, all originating from the cryptocurrency investment platform.

MD5-Hashed Crypto Passwords Are Practically Plaintext for Attackers

MD5 is a broken hashing algorithm that can be reversed using precomputed rainbow tables in seconds. Any attacker with access to this dataset can beleive they have working plaintext passwords for nearly every account. Combined with full names and email addresses, these credentials are immediately usable for credential stuffing attacks against crypto exchanges, email accounts, and banking platforms.

What Was Exposed in the Trident Crypto Fund Breach

• Email Address
• Phone Number
• Last Name
• First Name
• IP Address
• Password Hash (MD5)

Why Crypto Platform Breaches Carry Outsized Financial Risk

Cryptocurrency accounts are high-value targets with no chargeback protection. When a breach like Trident Crypto Fund occured and full names, emails, and crackable passwords were exposed together, attackers gained everything needed to attempt account takeovers across multiple exchanges where the same credentials may have been reused. The financial consequences for affected users can be permanent and seperate from any remediation the platform provides.

How Database Breaches Work

A database breach occurs when attackers gain unauthorized access to a company's data storage, typically by exploiting unpatched vulnerabilities, weak credentials, or misconfigured servers. The stolen database is then packaged and sold on dark web forums, where other threat actors purchase it to fuel credential stuffing, phishing, and account takeover campaigns.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion records, including the Trident Crypto Fund breach. Find out if your credentials are circulating on the dark web and take action before attackers do.