Top

CoinEx Reveals Insights Into Recent Platform Hack

Policy & Regulation·September 20, 2023, 1:33 AM

Hong Kong crypto exchange CoinEx has issued a further update relative to the security breach that occurred on the platform last week resulting in one of the exchange’s hot wallets being compromised.

Photo by FLY:D on Unsplash

 

Immediate response

In the immediate aftermath of the $70 million hack, CoinEx took action to safeguard user assets and initiate an investigation into the incident. It suspended all deposit and withdrawal services and executed an emergency shutdown of the hot wallet server. Following this, the company securely moved the remaining assets to cold storage, commencing the process of reconstructing and deploying a new wallet architecture.

The firm also engaged in an investigation, spearheaded by its wallet and security teams, to ascertain the extent of the breach. Moreover, CoinEx claims to have proactively reached out to fellow exchanges to freeze any assets related to the attack.

Haipo Yang, the Founder and CEO of CoinEx, conveyed his apologies to affected users through his personal X (formerly Twitter) account. He emphasized the team’s commitment to restoring services promptly and reassured users that their funds will remain secure.

Following up on that commitment, CoinEx published an update on the hot wallet hack on September 15 to address these concerns individually.

 

New wallet deployment

The exchange expects to finalize wallet upgrades within the upcoming week, after which withdrawals will gradually be phased in, subject to security evaluations. The CoinEx team is currently working on developing and deploying an entirely new and robust wallet system capable of managing activities across 211 chains and 737 assets.

The firm has outlined that each of its product lines operates independently, featuring its own risk control system. Consequently, the security incident that occurred on CoinEx will not affect the integrity of its other product lines.

In its most recent update on Tuesday, the Hong Kong crypto exchange confirmed that 80% of its wallet system has now been reconstructed. It added that it has initiated preparations to enable the withdrawal system on the platform. It stated:

”Details about the resumption of withdrawals, including specific dates, times, and arrangements, will be announced on the CoinEx website. Please stay updated on our announcements for the latest information.”

 

Ongoing investigation

Regarding the identity of the attacker, CoinEx has confirmed that the matter is currently under investigation. While some security firms have made attribution claims, the company is focusing primarily on deploying the new wallet architecture, restoring affected users and functionalities, and enhancing overall security.

At the same time, the company has initiated communications with the hackers in a bid to proactively seek a mutually agreeable resolution. While the incident implicates the loss of a substantial amount of funds, the firm maintains that in the context of the overall business, the sum represents only a small percentage of total assets under its management.

Exchange security remains a major challenge in the crypto sector, with hacks happening on an ongoing basis. Last week, Seychelles-headquartered peer-to-peer crypto platform Remitano acknowledged a $2.7 million hack. At the beginning of September, crypto gambling platform Stake was reported to have suffered a $41 million hack.

More to Read
View All
Policy & Regulation·

Jul 02, 2025

Malaysian regulator seeks feedback on crypto framework enhancements

The Securities Commission Malaysia (SC), the statutory body tasked with regulating and developing capital markets within the Southeast Asian nation, has published a consultation paper in an effort to garner public feedback on potential enhancements to its crypto regulatory framework. In a press release published to its website on June 30, the SC claimed that its proposals seek “to enhance competitiveness of Malaysia’s regulated digital asset market, improve investor protection and strengthen the resilience and integrity of [Digital Asset Exchange] operators.”Photo by Vlad Shapochnikov on UnsplashEasing listing requirementsIn the event that the proposals are adopted, one key change would see a liberalization of the listing requirements for digital assets. Where certain key eligibility criteria have been met, the regulator would allow the listing of digital assets on digital asset exchanges without prior SC approval. The regulator stated that it wants to make this change in order to speed up the time taken to get digital assets to market as they emerge. By setting out additional criteria, there will be greater exchange operator accountability. Exchange operators would bear responsibility for listing tokens in compliance with the requirements set out by the regulator.  Assets could only be listed once those assets and the underlying protocol and network had undergone security audits which had been carried out by an independent and qualified blockchain security auditor, with the audit results made public.  For the purposes of the “Liberalised Listing Framework,” the asset must have been trading on a Financial Action Task Force (FATF)-compliant virtual asset service provider (VASP) platform for a minimum of one year. The regulator believes that easing the listing requirements will result in a broader digital asset product offering being made available in Malaysia. Last month, Thailand’s Securities and Exchange Commission (SEC) started a public consultation process aimed at revising token listing rules. Coin listing processes have also come under scrutiny from the authorities in South Korea recently. Segregating client assetsAmong the proposals is a plan to oblige exchange platforms to properly segregate client assets from operational funds and assets held by the exchange business. In recent years, many failed crypto exchange platforms, most notably FTX, got into difficulty by co-mingling customer funds with operational funds. Furthermore, the regulator doesn’t want any cross-over of assets between the local exchange operator and any overseas affiliate companies it may have.The SC stated that it is cognizant of recent global exchange failures, which has led it towards further enhancing crypto exchange operational governance and controls. It suggests that only 10% of client assets should be held by a Malaysian exchange in hot wallets, with the remaining 90% held in cold or offline wallets. The SC said that it welcomes feedback from members of the various stakeholder groups on the proposals outlined. The public consultation period runs from June 30 through Aug. 11.  Malaysia is expected to have 4.74 million crypto users by 2026. That would equate to 13% of Malaysians using crypto by then.

news
Web3 & Enterprise·

Jan 18, 2024

Carrieverse teams up with Internet Computer for content and marketing partnership

Web3 firm Carrieverse has entered into a strategic partnership with the South Korean division of the public decentralized network the Internet Computer, ICP.Hub Korea, to expand their respective blockchain ecosystems, according to an article published by local news outlet Newspim on Thursday (KST). The two firms plan to create content and collaborate on marketing strategies.Photo by Scott Graham on UnsplashRevolutionizing blockchainThe Internet Computer brings autonomous serverless cloud functionality to the Internet, allowing builders to bring Web3 services and enterprise systems to the public. It was launched in May 2021 after five years of development by the Swiss non-profit organization DFINITY Foundation. The network is also known for its Web2 and Web3 interoperability, scalability, sustainability and tamperproof software. In particular, it employs a reverse gas model unlike most EVM-compatible blockchains, which allows end users to view and utilize smart contracts with just a standard web browser without setting up a wallet or own token assets. ICP, the Internet Computer’s native token, is currently ranked 16th on CoinMarketCap’s price rankings by market capitalization, with a market capitalization of approximately $5.6 billion.  Navigating the Web3 sphereMeanwhile, Carrieverse’s Web3 services include a metaverse, a blockchain gaming platform called Cling and the card strategy role-playing game (RPG) Superkola Tactics, which is playable on Cling. These platforms are governed by the Carrieverse token ($CVTX), which is listed on several crypto exchanges like Bitget and BingX. The firm was also selected to join the UAE’s Dubai Multi Commodities Centre (DMCC) in November to establish a local subsidiary that will serve as a hub to expand the company’s global Web3 ecosystem. Together, the two parties are expected to pave new paths in the South Korean Web3 industry.

news
Policy & Regulation·

May 28, 2024

UAE agency applies fines amid ban on crypto mining on farms

The Abu Dhabi Agriculture and Food Safety Authority has announced a ban on cryptocurrency mining on farms, addressing concerns over the misuse of agricultural land.Photo by Kamil Rogalinski on UnsplashClaims of farm misuseAccording to the Khaleej Times, the Authority has informed UAE farmers that their lands are not to be used for Bitcoin and crypto mining. This activity is deemed a “misuse of the farm for purposes other than its intended use.” The new regulation aims to preserve the primary agricultural function of these lands and imposes penalties of up to 10,000 United Arab Emirates Dirhams (approximately $2,722) for violations. Cryptocurrency mining requires significant computational power and electricity, which conflicts with the farms’ intended agricultural use.  Broader support for miningDespite this specific restriction, the United Arab Emirates (UAE) maintains a supportive stance towards cryptocurrency and cryptocurrency mining beyond a farm setting. In 2023, the country emerged as a notable player in the global Bitcoin mining industry, with a combined mining capacity of around 400 megawatts, contributing approximately 4% of the global Bitcoin hash rate. It’s proven to be a popular place in which to locate a mining facility as the country has a robust infrastructure. Stable power is essential in order for miners to be able to run their machines in a sustainable manner. Additionally, the government has generally been supportive of the activity, fostering a conducive environment for both crypto and Bitcoin mining and blockchain technology more generally. Furthermore, the country occupies a strategic location at the crossroads of major trade routes. Regulatory clarity has also been provided by the authorities in the UAE with regard to how crypto mining activity is to be carried out. While this latest move against mining within a farm setting is a restriction, it still feeds into that overall framework of regulatory clarity and certainty. Attracting mining firmsGiven the aforementioned reasons in support of mining in the UAE, the Middle Eastern country continues to attract cryptocurrency mining firms.  In December of last year, a Dubai-headquartered Bitcoin mining company, Phoenix Group, struck a $380 million deal with Chinese mining equipment manufacturer MicroBT. That same month, the company was listed on the Abu Dhabi Securities Exchange (ADX). In May 2023, Abu Dhabi-based digital assets development company Zero Two entered into a partnership with North American crypto miner Marathon Digital with a view towards developing the region’s first large-scale crypto mining facility. Beyond mining, the location is also proving popular for crypto firms more generally. In May 2023, Chainalysis, a leading blockchain analytics company, established its regional headquarters in Dubai. Similarly, Blockdaemon, a provider of institutional infrastructure, expanded its operations in Abu Dhabi, facilitated by the Abu Dhabi Global Market (ADGM), a key financial regulator. Speaking at the Dubai FinTech Summit recently, Reece Merrick, Managing Director of enterprise blockchain company Ripple for the Middle East and North Africa (MENA) region, said that “the UAE has done a remarkable job in really putting itself in a position to be the global crypto hub.”

news
Loading