Top

Kronos Research experiences significant cybersecurity breach

Web3 & Enterprise·November 21, 2023, 12:16 AM

Kronos Research, a Taipei-based crypto trading, market making and venture capital firm, has found itself in the crosshairs of a cyber attack.

Photo by FLY:D on Unsplash

 

$25.6 million loss

Hackers gained unauthorized access to the company’s API keys, resulting in losses exceeding $25.6 million spread across various cryptocurrencies, prompting a concern within the crypto community.

The breach was detailed by the company in a social media post on the X platform on Saturday. That post read:

“In the interest of transparency Around 4 hours ago, we experienced unauthorized access of some of our API keys. We paused all trading while we conduct an investigation. Potential losses are not a significant portion of our equity and we aim to resume trading as soon as possible.”

 

On-chain sleuthing

Investigations by crypto community members have followed, led by blockchain researcher ZachXBT. ZachXBT is a well-known anonymous persona in the crypto space, having earned a reputation for uncovering hacks, scams and unethical practices within the crypto sector.

In this instance, ZachXBT uncovered a trail of transactions originating from a Kronos Research account. The meticulous execution of the cyber attack was evident in six transactions involving 2,780 ETH, 2,540 ETH (repeated twice), 2,636 ETH, 4.93 ETH and 2,507.52 ETH, all directed to addresses controlled by the hacker.

Kronos Research has followed up with a tweet thread on X, acknowledging the gravity of the situation and confirming losses of approximately $25.65 million in crypto assets. Despite the alarming figures, the company sought to reassure stakeholders by emphasizing that the losses represent a relatively small fraction of its total equity. In a commendable display of accountability, Kronos Research pledged to absorb all losses internally, shielding its partners from the financial ramifications of the breach.

The Taiwanese firm posted:

“Our team has been working round the clock to minimize the impact and resume trading operations, following a hacking incident that involved unauthorized access to our API Keys.”

 

Implications for Woo X

The operational repercussions were swift and impactful, with Kronos Research opting for a temporary suspension of all trading operations. This decision rippled through to Woo X, the affiliated Taipei-based exchange and liquidity provider created by Kronos, which temporarily blocked specific asset combinations due to liquidity concerns. Importantly, Woo X assured users of the security of their funds and later announced the resumption of spot and perpetual trading.

Looking forward, Kronos Research outlined its intention to resume trading operations in the coming days, contingent on favorable conditions.

The cyber attack on Kronos Research occurred against the backdrop of heightened cybersecurity concerns within the crypto space. According to blockchain security firm Certik, approximately $173 million was lost to crypto attacks in November alone. The Kronos Research breach follows on the heels of Poloniex’s $131 million hack, highlighting the persistent challenges faced by crypto platforms in securing user assets.

More to Read
View All
Policy & Regulation·

Jul 17, 2023

Blockchain Council Exec: Philippines Poised for Crypto Adoption

Blockchain Council Exec: Philippines Poised for Crypto AdoptionDonald Lim, the Founder of the Blockchain Council of the Philippines (BCP), believes that the country has all the necessary elements for mainstream crypto and blockchain adoption.In a recent interview with Cointelegraph, Lim discussed the potential for crypto adoption in the Philippines and explained why he is optimistic about the success of blockchain projects in the country.Photo by Krisia on PexelsFinding its place in blockchainAccording to Lim, the BCP recognized the global shift towards Web3 and organized the Philippine Blockchain Week to explore the ecosystem’s potential. That activity revealed to the organizers that the country has a vibrant community eager to find its place in the world of blockchain. Lim expressed confidence in the Philippines becoming the blockchain capital of Asia, citing the country’s technical expertise, young population with a median age of 25, and its ability to adapt quickly, as demonstrated by the popularity of the play-to-earn game Axie Infinity.Crypto interestAxie Infinity, a play-to-earn blockchain game, gained significant traction in the Philippines in 2021, with 40% of its player base coming from the country. This increased awareness of Web3 concepts and the creation of crypto wallets. Additionally, research carried out recently suggests the Filipinos are among the most interested in crypto in the region.Lim noted that international organizations have been eager to enter the Philippine market due to favorable demographics and the government’s open stance on crypto and blockchain. The executive emphasized that the government is not seeking to stifle innovation in the sector. On the contrary, it welcomes blockchain and Web3 projects, creating an environment conducive to their growth.Ethan Rose, founder of Pouch, a wallet service supporting the Bitcoin Lightning Network in the Philippines, corroborated this sentiment. Pouch has successfully onboarded over 400 businesses in the country to accept Bitcoin payments. While the onboarding of Filipino merchants into the crypto space is a positive step, Lim believes that it will take time before living solely on Bitcoin or crypto becomes a reality.Adoption inevitableHowever, he remains optimistic about the future, stating that it is only a matter of time before crypto adoption snowballs into something more significant.Lim highlighted the need for infrastructure development, expecting it to mature within the next four to five years. As the infrastructure improves, crypto will not only be used for payments but also for activities such as purchasing non-fungible tokens (NFTs) and participating in the metaverse. This comprehensive adoption will pave the way for a crypto-powered future in the Philippines.Philippine regulator, the Securities and Exchange Commission (SEC), recently delayed publication of its crypto regulatory framework. However, it appears that the move stems from an abundance of caution in getting the regulation right. Earlier this year, Robert De Guzman, Head of Legal Compliance at Philippines-based cryptocurrency exchange, Coins.ph, expressed his optimism that the authorities are developing a progressive regulatory framework for crypto in the Southeast Asian country.The Philippines shows promising potential for crypto and blockchain adoption, fueled by its young population, technical expertise, and supportive government. As the infrastructure continues to evolve, crypto adoption is expected to expand beyond payments, encompassing various aspects of the digital economy.

news
Web3 & Enterprise·

Dec 05, 2023

NEOPIN teams up with Project SEED to propel growth of Web3 gaming ecosystem

NEOPIN teams up with Project SEED to propel growth of Web3 gaming ecosystemCentralized decentralized finance (CeDeFi) protocol NEOPIN has partnered with Project SEED — a blockchain gaming ecosystem based in the United Arab Emirates (UAE) — to grow the global Web3 gaming ecosystem, according to South Korean news outlet News1. NEOPIN plans to serve as a bridge between Project SEED and the IP owners and game studios within its ecosystem, facilitating the creation of more global Web3 games.Photo by Mateo on Unsplash“Connecting notable IPs and game studios to gamify Web3 holds significant meaning beyond just securing well-made Web3 games. We expect to diversify the genres and improve the qualitative standards of Web3 games in collaboration with Project SEED,” said Kim Yong-gi, CEO of NEOPIN.Pioneering Web3 gaming excellenceLed by a team of experts from various cryptocurrency exchanges such as Binance and Crypto.com, Project SEED is the developer behind the popular Web3 action role-playing game (RPG) Outland Odyssey. The firm also operates the Grow Program, which was launched in 2021 to incubate blockchain game projects and allow builders to concentrate their efforts on developing high-quality games. Next year, Project SEED plans to unveil its launchpad platform Seed Launcher as part of the Grow Program to aid gaming finance (GameFi) projects in raising funds and discover promising projects worth investing in.Under the newest partnership, NEOPIN’s CeDeFi wallet function will be integrated into Web3 games and NFT projects that are launched through the Grow Program and Seed Launcher platform, driving worldwide user acquisition and promoting the launch of DeFi products on NEOPIN.“We will leverage NEOPIN’s wallet service, network and blockchain expertise to develop high-quality games for diverse users. We plan to strengthen our capabilities to provide benefits to developers, IP owners and gamers alike,” said Project SEED CEO Liko Subakti.NEOPIN’s blockchain journeySince 2017, NEOPIN has accumulated its blockchain expertise and technology by serving as a node validator in multiple global blockchain projects, including Ethereum, Tron, Cardano and Cosmos. Launched last year, its CeDeFi protocol aims to provide Web3 users with a safe and convenient non-custodial DeFi platform.Earlier this year, the company was selected to participate in the Innovative Program of the Abu Dhabi Investment Office (ADIO), attracting a series of investments. It is also working with the Abu Dhabi Global Market (ADGM), an international financial center and free zone in the UAE, to create the world’s first DeFi regulations through a public-private partnership.

news
Policy & Regulation·

Sep 16, 2023

Remitano Struck by $2.7M Alleged Hack

Remitano Struck by $2.7M Alleged HackHacks have been an unfortunate constant in the crypto and DeFi space with that reality having been compounded by news that Seychelles-based crypto exchange Remitano is believed to have been the victim of a $2.7 million heist.Photo by Growtika on UnsplashSuspicious transactionsIt’s understood that the firm encountered highly suspicious transactions, with the $2.7 million having seemingly vanished from its wallet, all at the hands of a single account. The incident unfolded on Thursday and has left blockchain analysts speculating about a potential security breach.The Remitano hot wallet initiated transfers to an address devoid of any prior transaction history. These transfers amounted to approximately $1.4 million in Tether (USDT), $208,000 in USD Coin (USDC), and 104,000 ANKR tokens (valued at $2,000 at the time). Those transfers raised concerns about the security of the platform.Israeli blockchain analytics platform Cyvers promptly sounded the alarm, notifying the crypto community about these suspicious transactions that had drained significant sums from Remitano’s coffers. This sudden event raised concern within the crypto space and naturally among Remitano customers.Tether freezes wallet addressAmid the growing apprehension, Tether, the issuer of USD stablecoin USDT, took decisive action by freezing the address associated with the alleged attacker. This swift intervention effectively halted any further movement of $1.4 million worth of drained cryptocurrency. Tether’s proactive response could potentially have prevented additional loss, preserving customers’ assets from further depletion.Remitano had remained notably silent initially in the wake of this incident, declining to issue any formal statement regarding the breach. It has since acted, as on Friday, it published a statement relative to the issue on its website. The absence of communication from the exchange had only fueled greater speculation surrounding the incident. However, the statement outlined:”On September 14, 2023, our Security Management team discovered a data breach from a third-party source that had compromised some of our sensitive information. As a result, a small amount of funds from the exchange’s hot wallets were transferred to suspicious wallet addresses through unauthorized withdrawal transactions.”Remitano, recognized as a peer-to-peer cryptocurrency exchange and payment processor, primarily caters to users in emerging markets across several countries, including Pakistan, Ghana, Venezuela, Cambodia, Kenya, Malaysia, India, South Africa, Vietnam, and Nigeria.The firm sought to reassure its customers:”As of now, Remitano ensures that users’ assets have NOT been and will NOT be affected by this incident. We are working tirelessly to uphold our commitment to ensuring the security and protection of your crypto assets.”Remitano was established in 2015; it is operated by Babylon Solutions Limited, which is headquartered in the Seychelles.Unfortunately, this episode adds to the troubling trend of cryptocurrency exchange hacks witnessed in 2023. Authorities in the United States have attributed these attacks to the Lazarus Group, a notorious cyber-crime organization allegedly linked to the North Korean government which has wreaked havoc globally although disproportionately so within the Asian region.

news
Loading