Top

HTX Hacker Returns Funds

Policy & Regulation·October 10, 2023, 12:46 AM

The hacker responsible for the nearly 5,000 ETH exploit on the Seychelles-headquartered cryptocurrency exchange HTX (formerly known as Huobi) last month has decided to return the stolen funds.

Towards the end of last month, the exchange fell victim to a hack, resulting in a loss estimated at around $8 million. According to on-chain data, the hacker has repatriated the pilfered cryptocurrency, marking a significant development in the aftermath of the cyberattack.

Photo by Shubham Dhage on Unsplash

 

Hacker rewarded

The returned funds were sent back in two separate transactions, one consisting of approximately 4,000 ETH and the other totaling around 1,000 ETH. HTX advisor and Tron Founder, Justin Sun, took to X (formerly Twitter) to officially confirm the recovery. In his statement, Sun revealed that HTX had not only received all the stolen funds as promised by the hacker but had also extended a gesture of goodwill. HTX rewarded the responsible party with a “white hat bonus” amounting to 250 ETH, equivalent to a substantial $400,000.

Sun expressed his satisfaction with the hacker’s decision, stating:

“We have confirmed that the hacker has fully returned all funds, as promised, and we have also paid the hacker a white hat bonus of 250 ETH. The hacker made the right choice. We would like to express our gratitude to everyone in the industry for their help.”

 

Hacker advisory message

During the return of the funds, the hacker conveyed a message on-chain, shedding light on the reason behind this act of restitution. The message read:

“Received your message. White hat bonus to

0x1Fc8674A51D6b97C968BE384337519CE7003152B. Your system hot wallet private key leak, you should change system hot wallet address and reduce the system hot wallet rate.”

HTX, in response to the hacker’s decision to return the funds and in accordance with its commitment, promptly sent the white hat bonus to the specified address. The exchange also requested the hacker to provide a detailed security vulnerability analysis report to the email address htxsafe@htx-inc.com.

This request aims to prevent similar incidents in the future, with assurances that the hacker’s privacy will be safeguarded.

Justin Sun had confirmed the original hack in September, at the time reassuring the community that HTX had covered all losses arising from the attack and resolved associated issues satisfactorily.

While acknowledging the severity of the hack, Sun pointed out that the stolen amount represented a relatively small fraction of the $3 billion in assets held by HTX’s users. To incentivize the return of the funds, HTX had even offered a reward of 5%, which equated to $400,000.

However, Sun also emphasized that if the funds had not been returned within a seven-day window, the company would have been compelled to involve law enforcement authorities.

Thankfully, it did not come to that, and the cryptocurrency exchange can now move forward with the confidence that its users’ assets are secure. This incident highlights the importance of cooperation and ethical choices within the crypto community, as well as the potential for resolution even in the face of cyberattacks.

More to Read
View All
Web3 & Enterprise·

Nov 15, 2023

Crypto.com’s Dubai-based subsidiary secures crypto license

Crypto.com’s Dubai-based subsidiary secures crypto licenseCRO DAX Middle East, the Dubai-based subsidiary of Singapore-headquartered cryptocurrency exchange platform Crypto.com, has achieved a significant milestone by obtaining a license from the emirate’s Virtual Assets Regulatory Authority (VARA) to provide specified virtual asset services.Photo by Timo Volz on UnsplashExpanding product offering in DubaiThe approval, announced by the firm via a press release published to its website on Tuesday, marks a pivotal moment for the Singapore-based Crypto.com, allowing it to offer regulated virtual asset services in Dubai, including exchange services, broker-dealer services, management and investment services as well as lending and borrowing services.The virtual assets service provider (VASP) license is contingent upon CRO DAX Middle East meeting specific conditions and localization requirements outlined by VARA. Once these conditions are satisfied and the operational approval notice is received from the regulator, the company will be poised to commence operations. These services will be made accessible to both retail and institutional users through Crypto.com’s app and exchange platform.Kris Marszalek, CEO of Crypto.com, expressed his enthusiasm for Dubai’s regulatory approach, stating: “Dubai continues to show it is a leading market when designing effective regulation for the crypto space while still supporting adoption and innovation.”Dubai’s virtual asset sector developmentThe regulatory framework for virtual assets in Dubai was established under the Dubai Virtual Asset Regulation Law in March 2022, leading to the creation of VARA. Sheikh Mohammed bin Rashid, Vice President and Ruler of Dubai, founded VARA with the aim of developing an advanced legal framework to safeguard investors. Furthermore, the objective was to set international standards for the governance of the virtual asset industry, while fostering responsible business growth.VARA issued regulations in February to provide clarity and certainty on the expected level of operator responsibility and to mitigate market risks. This move aligns with the broader context of global cryptocurrency regulations, aiming to create a safe environment for investors in the wake of recent collapses of major platforms.Crypto.com is working to become one of the first virtual asset exchanges to implement its VASP license in accordance with VARA’s specialized regulations issued earlier this year. The company had previously received its minimum viable product provisional license in June 2022 and the MVP preparatory license in March of the current year. The operational license, which follows the preparatory and provisional stages, grants virtual asset service providers permission to conduct activities in seven specified categories.Adapting to the marketThe company has also been working on licensing in other markets. In Singapore, where it is headquartered, the company received a Major Payment Institution (MPI) trading license from the Monetary Authority of Singapore (MAS) in June. The company has also re-calibrated its offering based on market shifts. Earlier this year, it halted its institutional exchange service in the United States due to a downturn in institutional demand stateside.In March 2022, Crypto.com declared Dubai as its regional hub for the Middle East and North Africa (MENA), solidifying its commitment to expanding its presence and contributing to the growth of the cryptocurrency ecosystem in the region.

news
Web3 & Enterprise·

Aug 14, 2025

Fonte Capital launches Central Asia’s first spot Bitcoin ETF

Fonte Capital, an Astana-based investment management company that allocates capital across a broad range of asset classes, including digital assets, launched a spot Bitcoin exchange-traded fund (ETF) in Kazakhstan’s capital city on Aug. 13. The firm is based within the Astana International Financial Centre (AIFC), with the launch prompting AIFC Governor Renat Bekturov to take to X to outline that the product offering is the first spot Bitcoin ETF to be listed within the Central Asian region.Photo by Kanchanara on UnsplashReflecting Bitcoin price dynamicsThe product has been listed on the Astana International Exchange (AIX) and has been assigned the ticker “BETF.” In announcing the offering, Fonte claimed that the ETF “aims to accurately reflect the price dynamics of bitcoin, striving to achieve this performance before fees and fund obligations.”Shares in the ETF are listed in U.S. dollars, with the fund having a “non-exempt” classification, meaning that it can be offered to a broad range of investors, including non-qualified retail investors. Each ETF share will be fully backed by Bitcoin, with Fonte having partnered with BitGo for digital asset custody.  Delivering institutional-grade accessTaking to social media, BitGo described the product offering as a “new era for digital assets” in Kazakhstan. The company asserted that through what it termed “U.S.-regulated cold storage,” the new fund is delivering institutional-grade access to Bitcoin within the region for the first time. Fonte pointed out that the fund “provides investors with a regulated and secure way to include Bitcoin in their investment portfolios without the complexities associated with holding and transferring the underlying asset.” This isn’t the first Bitcoin-related product that the AIX has listed. Back in 2021, it listed iX Bitcoin Exchange Traded Notes, with special purpose company iX Bitcoin SPC Limited acting as the note issuer.  The product differs from the Fonte ETF in that it is backed by shares of ProShares Bitcoin Strategy ETF, a future-based ETF first listed on the New York Stock Exchange (NYSE) in 2021. In comparison, Fonte’s product has the advantage of being directly backed by Bitcoin. The ETF’s backers have pointed out that there are further implications for the ETF’s shareholders. As the product is regulated by the AIFC, Fonte asserts that within that jurisdiction, holders of the product’s shares are protected from the potential reach of international sanctions. In this regard, the product offers further protection as it is not dependent upon overseas issuers.  Overall, the AIFC has played a key role in the development of crypto within Kazakhstan over the course of the last few years. In 2023, it awarded crypto exchanges Bybit and Binance approval to trade within the Central Asian nation.  Binance subsequently launched a local crypto exchange platform in Kazakhstan, achieving full licensing in October 2024. In June of this year, the authority granted its first license for the issuance of a fiat-backed stablecoin.  It emerged recently that Kazakhstan is working towards the establishment of a national crypto reserve, with the administrators of the country’s sovereign wealth fund expressing the desire to commence investment in crypto assets.

news
Policy & Regulation·

Mar 13, 2024

Hong Kong regulator unveils stablecoin sandbox

Following December's release of proposed fiat-referenced stablecoin regulations, the Hong Kong Monetary Authority (HKMA) has progressed further with the introduction of a stablecoin sandbox.Photo by Nextvoyage on PexelsFormulating a regulatory regimeThe regulatory sandbox, announced through a press release published to the regulator’s website on March 12, encompasses stablecoin currencies beyond the Hong Kong dollar, although the HKMA refrained from specifying particular currencies. Eddie Yue, CEO of the HKMA, emphasized the sandbox's role as a platform for constructive dialogue between the regulatory authority and the industry. Yue stated:"The sandbox arrangement serves as an effective channel for the HKMA and the industry to exchange views on the proposed regulatory regime.”Yue further noted that such engagement is pivotal for formulating regulatory requirements conducive to the sustainable and responsible growth of the stablecoin issuance business. The stablecoin sandbox finds its digital footprint within the International Financial Centre on the HKMA's website. The documentation accompanying the sandbox outlines several key requirements for potential participants. These include demonstrating genuine interest and a feasible plan for issuing fiat-referenced stablecoins in Hong Kong, as well as a concrete strategy for engagement within the sandbox. Additionally, applicants must exhibit a reasonable prospect of compliance with the proposed regulatory framework. Minimum capital requirementsOne notable regulation proposed stipulates that issuers must be Hong Kong-based entities with a minimum capital requirement of HK$25 million ($3.2 million) or 2% of the stablecoin issuance, whichever is higher. The HKMA remains vigilant regarding public announcements by sandbox participants, ensuring that such declarations do not misconstrue endorsement or accreditation from the regulatory authority. In late January, reports suggested discussions between Harvest Global Investment, RD Technologies, Venture Smart Financial Holdings and the HKMA regarding their potential entry into the sandbox. Harvest Global Investment, boasting over $200 billion in assets under management, signifies a significant player in this evolving digital assets space.RD Technologies took to the X social media platform to publicize its approval of the HKMA’s stablecoin sandbox. It also availed of the opportunity to outline that it’s in the process of launching a Hong Kong dollar (HKD)-based stablecoin, which will be known by the short-code HKDR.Hong Kong-based fintech firm AnchorX also chimed in, stating that the sandbox is “a pivotal step forward for the industry, enabling informed dialogue and collaboration between regulators and fintech innovators.” Like RD Technologies, AnchorX is also looking to get involved in the stablecoin business, having developed the AxHKD Hong Kong dollar-based stablecoin, which it is currently beta testing, in collaboration with Conflux Network. Juan Leon, crypto analyst with Bitwise Asset Management, suggested that the move is a great initiative, while calling on the U.S. Federal Reserve Chair Jerome Powell to follow Hong Kong’s example. On the tokenization front, Hong Kong made headlines in 2023 with the issuance of the world's largest native digital bond — a green bond exceeding $750 million. Late last year, it also proposed regulations relative to tokenization of real-world assets.Guidance provided to banks on tokenization, coupled with plans for forthcoming legislation, further solidifies Hong Kong's position as a trailblazer in the realm of digital finance.  

news
Loading