Retool released details of the Fortress Trust $15 million theft case, with Google Authenticator's cloud sync feature being the attack vector.

BlockBeats reported on September 18th that software company Retool disclosed details of 27 hacked crypto customer accounts, including the theft of 15 million dollars worth of crypto from Fortress Trust. The report shows that the culprit behind the attack was the cloud sync feature of Google Authenticator, which turned multi-factor authentication into single-factor authentication. The attacker took control of the Okta account, which then gave them control of the Google account, allowing them to access all OTPs stored in Google Authenticator.