The CEO of Cryptsy has accused the developer of Lucky7Coin of stealing over 13k of BTC and he puts a rewards of 1000 BTC to to find the guilty. "About a year and a half ago, we were alerted in the early AM of a reduction in our safe/cold wallet balances of Bitcoin and Litecoin, as well as a couple other smaller cryptocurrencies. After a period of time of investigation it was found that the developer of Lucky7Coin had placed an IRC backdoor into the code of wallet, which allowed it to act as a sort of a Trojan, or command and control unit. This Trojan had likely been there for months before it was able to collect enough information to perform the attack." "These are the approximate figures taken: Bitcoin: 13,000 BTC Litecoin: 300,000 LTC" "In fact, Iām offering a bounty of 1000 BTC for information which leads to the recovery of the stolen coins." full story here: http://blog.cryptsy.com/
In todays IT landscape, where virtual machines and containers are so trivial to spin up, why in the hell was the wallet on a box that could see other "secure" transactions? Hell, I spun up a quick VM and installed go just to create my Decred address. And I trust them...