Top

Mixin Network Suspends Services Amid $200 Million Hack

Policy & Regulation·September 25, 2023, 11:56 PM

On Monday, Mixin Network, a decentralized peer-to-peer network whose project team is based in Hong Kong, officially confirmed a substantial security breach that resulted in the loss of approximately $200 million in crypto assets from its mainnet.

Photo by GuerrillaBuzz on Unsplash

 

September 23 hack

This incident, disclosed via an X (formerly Twitter) post, prompted the immediate suspension of all deposit and withdrawal services on Mixin Network until further notice.

The project team outlined that the hack occurred on September 23, exposing vulnerabilities that allowed malicious actors to compromise the database of a third-party cloud service provider. Mixin Network has taken action to address the situation, enlisting the expertise of Singapore-headquartered blockchain security investigator SlowMist and the support of Google to conduct a thorough investigation and formulate a recovery plan.

At the time of the breach, Mixin Network’s holdings included $94.48 million in Ether, $23.55 million in Dai, and $23.3 million in Bitcoin, as reported in an independent investigation by PeckShield. The total value of assets affected amounted to $141.32 million.

Cyvers, an Israeli Web3 security firm, has also been looking into the matter on Monday. In a social media post, the firm stated:

”Our internal investigation has uncovered suspicious funding transactions involving @MixinKernel hacker addresses. Two of hacker addresses received 51 $ETH from 0x1795F0eBDa5A836aE63F28CE546E72de069A8bd2 who was interacted with @HuobiGlobal and @binance.”

The firm goes on to call on Binance and its CEO Changpeng Zhao (CZ) and Huobi to help identify the wallet address in question.

 

Halting withdrawals

In response to the security breach, Mixin Network has temporarily halted all deposits and withdrawals on its platform. These services will only resume once the vulnerabilities have been identified and fully resolved. On X, the project stated:

”Deposit and withdrawal services on Mixin Network have been temporarily suspended. After discussion and consensus among all nodes, these services will be reopened once the vulnerabilities are confirmed and fixed. During this period, transfers are not affected.”

Details regarding the plans to recover the lost assets for affected users have yet to be announced.

Despite initial promises that Mixin Network’s Founder, Feng Xiaodong, would address the incident in a public Mandarin live stream on September 25, links to the live stream were not provided on the official social media channels or the website mixin.network.

The incident has garnered criticism on the basis of a lack of decentralization. One commentator stated:

”Some of those blockchain protocols are so decentralized that when their cloud database is hacked, coins are also gone.”

 

Ongoing hacks

This security breach on Mixin Network is the latest in a series of high-profile crypto-related incidents. Ethereum Co-Founder Vitalik Buterin recently fell victim to a SIM swap attack, which resulted in the compromise of his X (formerly Twitter) account.

In a statement, Buterin revealed that the hackers had successfully executed a SIM swap, a type of attack that targets the victim’s mobile phone number to gain unauthorized access to various online accounts, including social media, banking, and cryptocurrency platforms.

The repercussions of the Mixin Network hack underscore the ongoing challenges faced by the crypto industry in ensuring the security and protection of digital assets. As investigations continue, affected users await further developments and the eventual resumption of deposit and withdrawal services.

More to Read
View All
Policy & Regulation·

Jun 03, 2023

Qatar Criticized for Regulatory Inaction Against Crypto Companies

Qatar Criticized for Regulatory Inaction Against Crypto CompaniesThe Qatari Central Bank (QCB) has come under fire from the Financial Action Task Force (FATF) for its lack of efforts in enforcing regulations that prohibit virtual asset service providers.In a report released earlier this week, the global watchdog for money laundering and terrorist financing highlighted the need for Qatar to enhance its capabilities in effectively combating evolving forms of criminal activity, including taking action against virtual asset service providers.Photo by Akbar Nemati on PexelsContinuous improvement neededAlthough acknowledging “substantive improvements” applied to its control system, the FATF report emphasized that Qatar must further improve its understanding of more complex forms of money laundering and terrorist financing.While Qatar has shown positive progress in gathering beneficial ownership information through its unified register, which consolidates data on its citizens, the FATF report emphasized the need for stronger controls to ensure the accuracy and currency of the collected information. The report also criticized Qatar’s authorities for underutilizing their sophisticated analysis capabilities in identifying instances of money laundering.Lack of control despite VASP banDespite the Qatar Financial Centre Regulatory Authority’s (QFCRA) announcement in December 2019 that virtual asset service providers (VASPs) are not allowed within or from the Qatar Financial Centre, the country’s regulatory authority has made little progress in penalizing firms that facilitate or provide crypto asset services.Interestingly, while Qatar has banned virtual asset service providers, it has expressed interest in exploring the potential use cases of a central bank digital currency (CBDC). In June 2022, it was reported that the QCB is in the early stages of developing a CBDC.Sheikh Bandar bin Mohammed bin Saoud Al Thani, the governor of Qatar’s central bank, revealed that the QCB is evaluating the advantages and disadvantages of CBDCs and determining the appropriate technology and platform.As the country explores the potential of a CBDC, it must ensure that its regulatory framework aligns with international standards and best practices. By doing so, Qatar can strike a balance between fostering innovation in the digital currency space and safeguarding its financial system from illicit activities.Global coordinationThrough the Paris-based money-laundering watchdog, and calls from the G7, the European Central Bank, and others to regulate on a global basis, the official response to controlling digital assets and VASPs is becoming more globally coordinated. Central bankers and government officials have learned that decentralized finance has the ability to be borderless.FATF has been active in getting more countries on board. Effective from Thursday, Japan now implements FATF’s “travel rule” with respect to digital assets. That action was taken following a FATF finding that Japan wasn’t following best practice relative to anti-money laundering (AML) measures. Pakistan recently banned cryptocurrencies in an effort that appears to have been motivated by wanting to stay off the FATF’s gray list of non-compliant countries.While Pakistan managed to get itself off that list, the United Arab Emirates found itself on the gray list. The UAE’s Central Bank issued guidance on AML relative to virtual asset companies, in an effort to come back into FATF compliance.It remains to be seen how Qatar will respond to the FATF’s critique and whether it will take concrete actions to address the concerns raised. The international community will be closely monitoring Qatar’s efforts to combat financial crimes in the virtual asset sector and to establish a robust regulatory framework for its future CBDC endeavors.

news
Policy & Regulation·

Apr 28, 2023

Taiwan’s FSC to Release Cryptocurrency Guidelines for Banks in September

Taiwan’s FSC to Release Cryptocurrency Guidelines for Banks in SeptemberHuang Tien-Mu, Chairman of the Taiwanese Financial Supervisory Commission (FSC), said at the Legislative Yuan that regulatory guidelines for banks concerning cryptocurrencies will be available in September, as reported by local blockchain media Blocktempo.© Pexels/ Timo VolzHuang’s remarks were in response to questions from Legislator Lee Guei-min about crypto-related issues.Legislator’s three concernsLee raised three concerns: the accessibility of DBS Digital Exchange, currently operating in Singapore, for Taiwanese users; whether traditional banks should be permitted to provide crypto trading platforms; and investor protection against exchange collapses like the one experienced by FTX.FSC Chairman’s answersHuang stated that the FSC has not received any requests related to DBS Digital Exchange. He mentioned the commission’s concerns about the intrinsic value of cryptocurrencies and their ongoing work on regulatory guidelines, set for release in September. Huang also highlighted the importance of financial authorities overseeing crypto trading platforms, citing FTX Japan as an example, where users are protected under Japanese regulations.To safeguard investors from potential collapses, Huang suggested separating assets between hot and cold wallets. Furthermore, he noted that the FSC is not considering allowing the 27 crypto trading platforms registered with the commission to be listed on Taiwanese stock exchanges.

news
Web3 & Enterprise·

Aug 16, 2023

Dubai Tempts AI and Web3 Enterprises With Subsidized Commercial Licenses

Dubai Tempts AI and Web3 Enterprises With Subsidized Commercial LicensesDubai has demonstrated over the past twelve months that it has its sights set on becoming a regional hub for innovation, and we have further evidence of that strategy today with news that the city is now enticing artificial intelligence (AI) and Web3 businesses with an unprecedented offer — commercial licenses at a 90% subsidy.Photo by Aleksandar Pasaric on PexelsAI and Web 3.0 CampusThe focal point of this strategic move is the Dubai AI and Web 3.0 Campus, a burgeoning tech haven designed to foster innovation and collaboration. The campus recently unveiled its decision to heavily subsidize licenses for companies choosing to establish a foothold within the city, publishing details of the move on Monday via a press release. The issuance of these licenses falls under the auspices of the Dubai International Financial Centre (DIFC), underscoring the city’s determination to attract global talent and diverse investment opportunities.Mohammad Alblooshi, CEO of DIFC’s Innovation Hub, expressed confidence in the power of this initiative, stating:“We are confident that by granting these licenses, we will attract more global talent and investment to the region and create a culture of collaboration and innovation.”The Dubai AI and Web 3.0 Campus is geared up to cater to its prospective denizens, equipped with cutting-edge AI lab facilities, comprehensive training programs, essential hardware support, and accelerator initiatives.All enterprises setting their sights on seizing the opportunity presented by the 90% subsidized commercial licenses are required to follow an application process.Crypto trading licensingDubai’s tech evolution extends beyond AI and Web3 realms. The city has been proactive in granting operational licenses to cryptocurrency exchanges, marking yet another stride toward its tech-driven future.In a recent development, Nomura’s crypto arm, Laser Digital Middle East, secured an operational license from Dubai’s Virtual Asset Regulatory Authority (VARA). This coveted license empowers Laser Digital to provide broker-dealer services and manage virtual asset investments within the emirate.The progressive regulatory approach taken in Dubai has led to crypto exchanges such as Bybit, choosing the city as the location for its headquarters. In June MENA-focused digital assets platform BitOasis became the first crypto company to be awarded a broker dealer license by the Dubai regulator.The regulatory approach taken in Dubai is proving to be progressive yet firm. The emirate hasn’t made the mistake of opting for ineffective light touch regulation that would attract the wrong type of crypto startup.That’s evidenced by the response of VARA to the establishment of the OPNX exchange within its jurisdiction. OPNX was founded by Su Zhu and Kyle Davies, the founders of failed Singapore-based crypto hedge fund, Three Arrows Capital (3AC). VARA issued the business’ founders with a reprimand earlier this year, for establishing a crypto-related platform in Dubai without having obtained a crypto trading license.Dubai’s willingness to embrace innovative technologies, coupled with its strategic initiatives and progressive regulation, is propelling it to the forefront of the global tech revolution. As it beckons AI and Web3 pioneers with enticing subsidized licenses and facilitates the growth of the cryptocurrency ecosystem, Dubai is carving a unique niche as a hub of technology and innovation and exploiting the potential growth opportunity that presents as a consequence.

news
Loading