Moonstone Research publishes 'Postmortem of Monero CCS Hack: A Transaction Graph Analysis' report

Justin Ehrenhofer¹’s new² blockchain analysis firm, Moonstone Research³ has published a report titled Postmortem of Monero CCS Hack: A Transaction Graph Analysis⁴ which shares the results of an ongoing investigation into the recent CCS Wallet incident⁵:

Most notably, we were able to reliably trace forward through three of the attacker’s transfers. This report shows the information that we have learned in the first 24 hours of our investigation. Our knowledge should improve over time. [..]

The blockchain analysis firm apparently used the compromised wallet’s private view key and the disclosed transaction IDs to conduct the investigation.

This is an ongoing story and the report will be updated when new information is available.

Update 23/11/7: luigi told Monero Observer that the private spend key was not shared with Moonstone Research; apparently the firm only used the view key, which was already publicly available, and the tx IDs included by luigi in the original incident report.

Update 23/11/9: Justin Ehrenhofer discussed the report in more detail in an interview with Monero Talk⁶.