Sponsored YouTube blogger Ian Balina, who is known for reviewing cryptocurrency initial coin offerings, fell prey to hackers during a recent live-stream, losing around $2 million in tokens. During the stream, one viewer noticed that someone drained all the tokens stored in Balina’s wallet, but the comment went unnoticed. Around 15 minutes later, Balina pulled the plug on his broadcast and didn’t resume the current review until two hours later.
Later, Balina said he halted the broadcast because he noticed he was forced out of his Google Sheets profile. “I’m not worried about the money. I learned my lesson. I only care about catching the hacker,” he said on Twitter.
According to Etherscan, there are 121 transactions related to Balina listed as “IanBal_Hack” followed by a single number up to four. Under the Token Transfers tab, you will find the transfer of 1 million Loom tokens, 2 million Pareto Network tokens, more than 20 million Nucleus Vision tokens, more than 75,000 Bread, and more related to IndiaHash, WaBi, Telcoin, and VIN.
So what happened? According to Balina, the hacks stems back to his old college email address. It’s listed as a recovery email address in Gmail and was apparently hacked in the past. He received an email from the college about the hack attempt and worked with the institution’s security team to resolve the issue. But they took too long and he simply gave up on the old email address.
“I kept text versions of my private keys stored in my Evernote, as encrypted text files with passwords,” he said. “I think they hacked my [Gmail] using my college email, and then hacked my Evernote.”
Viewers question the validity of the hack, wondering if this “attack” was merely a scheme to avoid paying taxes. Others point out the problems of bragging about your wealth online, and that storing private keys in Evernote, in a Box account, within an email or Excel file is just a really bad idea.
Meanwhile, Balina is coined as the “shill guy” over on Reddit, as comments suggest that he receives one to two percent of the token supply he advises to followers. This could be why he doesn’t show concern over the lost money: The stolen tokens may simply not be a personal financial investment. Many believe that he should disclose his possible earnings when promoting initial coin offerings during broadcasts.
“Balina does very good research and has a pretty sound strategy that he shares for free,” one Reddit user defends. “I don’t care that he gets paid to advise ICOs.”
Regardless of his background, income, and intention, Balina’s worth is down $2 million in cryptocurrency due to relying on Evernote. Based on the information he provides, he may use the same password for his old college email account, Gmail, and Evernote. He has more than 116,000 followers on YouTube, making him a prime target given the financial info he throws into his streams.
Currently, Balina is watching his digital coins wash up on Binance, KuCoin, and other exchanges.