Top

HTX Hacker Returns Funds

Policy & Regulation·October 10, 2023, 12:46 AM

The hacker responsible for the nearly 5,000 ETH exploit on the Seychelles-headquartered cryptocurrency exchange HTX (formerly known as Huobi) last month has decided to return the stolen funds.

Towards the end of last month, the exchange fell victim to a hack, resulting in a loss estimated at around $8 million. According to on-chain data, the hacker has repatriated the pilfered cryptocurrency, marking a significant development in the aftermath of the cyberattack.

Photo by Shubham Dhage on Unsplash

 

Hacker rewarded

The returned funds were sent back in two separate transactions, one consisting of approximately 4,000 ETH and the other totaling around 1,000 ETH. HTX advisor and Tron Founder, Justin Sun, took to X (formerly Twitter) to officially confirm the recovery. In his statement, Sun revealed that HTX had not only received all the stolen funds as promised by the hacker but had also extended a gesture of goodwill. HTX rewarded the responsible party with a “white hat bonus” amounting to 250 ETH, equivalent to a substantial $400,000.

Sun expressed his satisfaction with the hacker’s decision, stating:

“We have confirmed that the hacker has fully returned all funds, as promised, and we have also paid the hacker a white hat bonus of 250 ETH. The hacker made the right choice. We would like to express our gratitude to everyone in the industry for their help.”

 

Hacker advisory message

During the return of the funds, the hacker conveyed a message on-chain, shedding light on the reason behind this act of restitution. The message read:

“Received your message. White hat bonus to

0x1Fc8674A51D6b97C968BE384337519CE7003152B. Your system hot wallet private key leak, you should change system hot wallet address and reduce the system hot wallet rate.”

HTX, in response to the hacker’s decision to return the funds and in accordance with its commitment, promptly sent the white hat bonus to the specified address. The exchange also requested the hacker to provide a detailed security vulnerability analysis report to the email address htxsafe@htx-inc.com.

This request aims to prevent similar incidents in the future, with assurances that the hacker’s privacy will be safeguarded.

Justin Sun had confirmed the original hack in September, at the time reassuring the community that HTX had covered all losses arising from the attack and resolved associated issues satisfactorily.

While acknowledging the severity of the hack, Sun pointed out that the stolen amount represented a relatively small fraction of the $3 billion in assets held by HTX’s users. To incentivize the return of the funds, HTX had even offered a reward of 5%, which equated to $400,000.

However, Sun also emphasized that if the funds had not been returned within a seven-day window, the company would have been compelled to involve law enforcement authorities.

Thankfully, it did not come to that, and the cryptocurrency exchange can now move forward with the confidence that its users’ assets are secure. This incident highlights the importance of cooperation and ethical choices within the crypto community, as well as the potential for resolution even in the face of cyberattacks.

More to Read
View All
Policy & Regulation·

Dec 27, 2024

Proposed stablecoin legislation advances to Hong Kong’s Legislative Council

Legislation geared towards regulating stablecoins has reached the Legislative Council stage in the Chinese autonomous territory of Hong Kong.  The bill, which extends to a 285 page document, has been formulated following “extensive consultations” with industry stakeholders, according to Eddie Yue, CEO of the Hong Kong Monetary Authority (HKMA).  This latest development moves the Chinese autonomous territory one step closer to having a comprehensive regulatory framework in place for stablecoins. The bill’s arrival at the Legislative Council follows its publication on Dec. 6 in Hong Kong’s Gazette. Subsequently, on Dec. 18, it made its preliminary entry at the Legislative Council by way of a first reading. The legislation will deem a digital asset a stablecoin if it is operated on a distributed ledger, is expressed as a unit of account and maintains an equivalent value relative to another asset that it references. Digital assets issued by governments or central banks will be excluded from that stablecoin definition.Photo by Laurentiu Morariu on UnsplashThree readings requiredBefore the bill can be enacted into law, it is required to go through a series of three readings. Allied to that process is a requirement for a series of debates, with the bill coming under the scrutiny of lawmakers. Depending upon the issues raised, this process may also require the introduction of amendments to the proposed legislation. If passed following the third reading, it will then be forwarded to the autonomous territory’s chief executive, John Lee Ka-chiu, to be signed into law. Once signed into law, stablecoin issuers in Hong Kong will then be required to obtain a license from the city's central bank, HKMA. That licensing process would implicate the HKMA scrutinizing the applicant with an emphasis on the evaluation of the issuer, its resources, the use of reserve assets and the means through which the stablecoin’s value will be rendered stable. Stablecoin optimismThis latest milestone has provoked a cause for optimism among some commentators. Sean Lee, co-founder of Hong Kong-based Web3 firm IDA, told the South China Morning Post (SCMP) that “the applications of stablecoin will be numerous.” Lee outlined that stablecoins can be used for payments, settlements, payrolls and financing, while adding that “new products will spring up, and transactions will be faster, instant, 24/7 – and at a lower cost.” Dominic Maffei, Standard Chartered’s head of digital asset and fintech for Hong Kong, is similarly encouraged. Maffei stated: “As of today, we think that stablecoins are the best available tool for connecting traditional finance and Web3 markets and have proven use cases and business models to support that belief.” Once enacted, the bill is likely to have a significant impact on the stablecoin market in Hong Kong. In Europe, the application of the Markets in Crypto Assets (MiCA) regulation is having such an impact. It has led to a growth in Euro-denominated stablecoin trading while leading U.S. dollar stablecoin Tether (USDT) is being delisted by many platforms due to its non-compliance with these regulations.

news
Web3 & Enterprise·

Jul 11, 2023

Crypto Exchange Loss Deters Temasek from Investing in Crypto Firms

Crypto Exchange Loss Deters Temasek from Investing in Crypto FirmsSingapore’s state-owned investor Temasek has ruled out investing in crypto companies for now, following a $275 million loss in the bankrupt US crypto exchange FTX.Photo by Plato Terentev on PexelsRegulatory uncertainty concernsTemasek’s Chief Investment Officer Rohit Sipahimalani said in a CNBC interview on Tuesday that the regulatory uncertainty in the crypto sector made it very difficult for the fund to make another investment in an exchange.“There’s a lot of regulatory uncertainty in this environment. And I do think that it will be very difficult for us to make another investment and exchange in the middle of all this regulatory uncertainty,” Sipahimalani said.He added that Temasek was not interested in investing in cryptocurrencies, but rather in exchanges that could generate fee-based revenue without taking balance sheet or trading risks. In May, it was reported that Temasek had invested in algorithmic currency system, Array. However, the global investment company was quick to deny those reports.“We’ve never been looking to invest in cryptocurrencies. Even the investment in FTX, we’ll be talking about investing in an exchange, which allowed us to get fee-based revenue without thinking [of] balance sheet risk or any trading risks,” he said. However, he said that Temasek would not be comfortable investing in exchanges given the way things are right now, and that it would depend on the right regulatory framework and investment opportunity.“If you have the right regulatory framework, and we are comfortable with it, and you have the right investment opportunity, there’s no reason for us to not to look at it,” he said. Temasek’s FTX investment was part of its early-stage investment strategy, where it invests in new disruptive technologies and tries to find the next winners, Sipahimalani said.But the strategy backfired when FTX filed for bankruptcy in November, with more than 1.4 million creditors and billions of dollars in liabilities, according to bankruptcy filings.Reputational damageTemasek wrote down its $275 million investment in FTX to zero soon after the collapse of the exchange. However, the bigger concern for the company is the posting of its worst returns since 2016 amid macroeconomic and geopolitical challenges. In the financial year ending in March 2023, the investing behemoth posted a $7.3 billion loss.The FTX loss sparked criticism from Singapore’s Deputy Prime Minister and Finance Minister Lawrence Wong, who called it “disappointing” and damaging for Singapore’s reputation. And that is the greater issue for Temasek relative to FTX.The amount of that particular loss is not that significant, given the size of the company and the scale of losses incurred elsewhere. The issue has been the reputational damage that the company has experienced as a direct consequence. Temasek maintains that it carried out competent due diligence, as have all of the venture capital investors who have all had their FTX investments wiped out.Further details on that due diligence are likely to emerge as Temasek, alongside many other leading investors in FTX, is being sued by creditors on the basis that they gave credence to what transpired to be a fraud. Temasek announced in May that it would cut the salaries of the staff responsible for the FTX investment, after conducting an internal review of the deal.

news
Policy & Regulation·

Jan 31, 2024

Japan works towards clearing legislative path for CBDC

Japan appears to be gearing up for the potential launch of its central bank digital currency (CBDC), the digital yen, as the government and the Bank of Japan (BoJ) collaboratively lay the legislative foundation for its rollout. While neither the BoJ nor the government has officially committed to the CBDC launch, recent developments indicate an accelerated push for its development. The BoJ's heightened focus on digital yen comes amidst concerns about falling behind China's and Europe's rapid progress in the CBDC space.Photo by Wenhao Ji on UnsplashOvercoming legal issuesAccording to a report by Japanese media outlet NHK, in a recent meeting, the Japanese government and the BoJ discussed future tasks and legal issues related to its CBDC implementation. To ensure a smooth and legally unobstructed launch, Tokyo aims to establish the necessary legal framework well in advance. Local news media Coinpost reported that the proposed legislation is set to "assume the introduction of the digital yen" and may involve amendments to key laws such as the Bank of Japan Act, the Criminal Code and the Civil Code. The goal is to finalize the list of required legal amendments by spring of the current year. In a meeting between Japan's central bank and the Finance Ministry, executives from relevant ministries and central bank directors explored various aspects of the CBDC. Discussions included the collaboration between a potential central bank digital currency and private cashless businesses, with a focus on convenience and personal data protection. Finance Ministry keen on launch ASAPLast month, the central bank received a report from a Ministry of Finance expert panel which recommended the launch of the digital yen without delay. The Ministry of Finance's December meeting addressed the division of roles between the Bank of Japan and intermediary banks, proposing a "two-tiered model" where domestic commercial banks play a pivotal role in digital yen issuance. Acting as intermediary institutions, these banks will bridge the gap between the central bank and digital yen users. The government and the BoJ are also contemplating ways to involve private businesses in the CBDC project while ensuring fair competition. Security and data privacy considerationsKey considerations in the discussions involve interoperability with other payment methods, ensuring security and handling user information safely. There is also an exploration of potential cross-border payment options. The government and the BoJ are committed to a comprehensive approach that considers various aspects of the CBDC project. Japan's unique context in the CBDC landscape is highlighted, with its continued reliance on cash and the presence of multiple private-sector tokenized money initiatives. Notably, the country boasts over 100 institutions and enterprises exploring digital currency through a digital currency forum since 2020. Separate initiatives, such as the MUFG-backed Progmat DLT platform, contribute to Japan's diverse digital currency landscape. Providing another example of progression in the digital assets arena, it emerged in September that the country is looking to permit startups to raise capital from venture capital firms using digital tokens rather than traditional equity. 

news
Loading