pull down to refresh

@daily_btc_lore | Daily Bitcoin History Threads

July 3, 2013 | 13 years ago today

ESEA Gaming League Caught Mining Bitcoin on Players' PCsESEA Gaming League Caught Mining Bitcoin on Players' PCs


In the spring of 2013, thousands of competitive gamers were unknowingly running a Bitcoin miner on their computers. It was embedded in the anti-cheat software they had installed to prove they weren't cheating. On July 3, 2013, three of them filed a class-action lawsuit to do something about it.

What ESEA WasWhat ESEA Was

The E-Sports Entertainment Association ran leagues for competitive Counter-Strike players. To participate, you installed their client — a piece of software with kernel-level access to your machine. That level of access was necessary: to catch cheaters, the software needed to see everything running on your system.

Handing a program that kind of access requires trust. ESEA's players had given it.

What HappenedWhat Happened

Between April 13 and April 30, 2013, an ESEA employee secretly embedded Bitcoin mining code into the anti-cheat client. The miner ran silently in the background on subscribers' machines for 17 days, using their GPUs to generate Bitcoin without their knowledge or consent.

The miner wasn't subtle. Users started noticing their computers running hot — GPU temperatures spiking to dangerous levels, fans running at maximum speed, hardware behaving erratically. Some users reported their graphics cards failing under the sustained thermal load. The replacement cost ran to roughly $300 per affected card.

Across thousands of machines, the miner generated approximately $3,700 worth of Bitcoin.

The ResponseThe Response

When the story broke, ESEA fired the employee responsible and attempted to characterize it as the rogue action of a single bad actor. The company's own forums told a different story — there was significant internal discussion, and the community wasn't prepared to accept the lone-wolf framing.

On July 3, three gamers filed a class-action lawsuit in federal court against ESEA. The lawsuit cited unauthorized computer access, property damage from hardware failures, and unjust enrichment from the mined Bitcoin.

In November 2013, New Jersey regulators reached their own conclusion. The state fined ESEA $1 million.

Why It MatteredWhy It Mattered

This was one of the first documented cases of Bitcoin being extracted from users through malware embedded in legitimate, trusted software. Earlier Bitcoin theft had mostly involved exchange hacks, wallet theft, or straightforward fraud. The ESEA case was different: the attack vector was software the victims had chosen to install and had reason to trust.

The mechanics that made it possible — a trusted process with elevated permissions, GPU compute quietly redirected, Bitcoin as a frictionless way to collect the proceeds — became the template for an entire category of attack that would follow for years. Cryptojacking became a recognized threat class. Drive-by miners appeared in browser ads. Cloud providers started charging customers for unauthorized mining running in their accounts.

It all followed the pattern ESEA established: trusted software, GPU mining, no consent.

Source: https://kotaku.com/e-sports-league-hit-with-lawsuit-over-bitcoin-mining-sc-692954889


Part of an ongoing series on Bitcoin history. This event falls on July 3, 2013.