Top

CoinEx Reveals Insights Into Recent Platform Hack

Policy & Regulation·September 20, 2023, 1:33 AM

Hong Kong crypto exchange CoinEx has issued a further update relative to the security breach that occurred on the platform last week resulting in one of the exchange’s hot wallets being compromised.

Photo by FLY:D on Unsplash

 

Immediate response

In the immediate aftermath of the $70 million hack, CoinEx took action to safeguard user assets and initiate an investigation into the incident. It suspended all deposit and withdrawal services and executed an emergency shutdown of the hot wallet server. Following this, the company securely moved the remaining assets to cold storage, commencing the process of reconstructing and deploying a new wallet architecture.

The firm also engaged in an investigation, spearheaded by its wallet and security teams, to ascertain the extent of the breach. Moreover, CoinEx claims to have proactively reached out to fellow exchanges to freeze any assets related to the attack.

Haipo Yang, the Founder and CEO of CoinEx, conveyed his apologies to affected users through his personal X (formerly Twitter) account. He emphasized the team’s commitment to restoring services promptly and reassured users that their funds will remain secure.

Following up on that commitment, CoinEx published an update on the hot wallet hack on September 15 to address these concerns individually.

 

New wallet deployment

The exchange expects to finalize wallet upgrades within the upcoming week, after which withdrawals will gradually be phased in, subject to security evaluations. The CoinEx team is currently working on developing and deploying an entirely new and robust wallet system capable of managing activities across 211 chains and 737 assets.

The firm has outlined that each of its product lines operates independently, featuring its own risk control system. Consequently, the security incident that occurred on CoinEx will not affect the integrity of its other product lines.

In its most recent update on Tuesday, the Hong Kong crypto exchange confirmed that 80% of its wallet system has now been reconstructed. It added that it has initiated preparations to enable the withdrawal system on the platform. It stated:

”Details about the resumption of withdrawals, including specific dates, times, and arrangements, will be announced on the CoinEx website. Please stay updated on our announcements for the latest information.”

 

Ongoing investigation

Regarding the identity of the attacker, CoinEx has confirmed that the matter is currently under investigation. While some security firms have made attribution claims, the company is focusing primarily on deploying the new wallet architecture, restoring affected users and functionalities, and enhancing overall security.

At the same time, the company has initiated communications with the hackers in a bid to proactively seek a mutually agreeable resolution. While the incident implicates the loss of a substantial amount of funds, the firm maintains that in the context of the overall business, the sum represents only a small percentage of total assets under its management.

Exchange security remains a major challenge in the crypto sector, with hacks happening on an ongoing basis. Last week, Seychelles-headquartered peer-to-peer crypto platform Remitano acknowledged a $2.7 million hack. At the beginning of September, crypto gambling platform Stake was reported to have suffered a $41 million hack.

More to Read
View All
Web3 & Enterprise·

Aug 31, 2024

WazirX seeks moratorium as it looks to restructure its liabilities

Zettai Pte Ltd., the Singapore-based holding company that controls Indian crypto exchange WazirX through its subsidiary Zanmai India, has filed an application for a moratorium with the Singaporean High Court, under section 64 of the Insolvency, Restructuring and Dissolution Act 2018. Six months requestedIn the filing (HC/OA 861/2024), the company has pleaded with the court to be granted a six-month moratorium, which would give the firm the space and time needed to restructure its liabilities. The company laid out details of its moratorium application in a blog post published to its website on August 28. The firm outlined that a moratorium represents “ the most efficient way to address users’ cryptocurrency balances on the Platform and facilitate recovery for users.” An automatic moratorium of 30 days has effectively been granted as a consequence of the application itself, and it is up to the court if it approves the six-month moratorium that is being sought. A date for the hearing of that matter has yet to be scheduled.Photo by Palu Malerba on Pexels$234 million hack falloutWazirX has been dealing with the fallout from a $234 million hack which occurred in July. One key entity that is owed funds is Indian crypto app CoinSwitch. In an effort to get its funds back, the company has sued WazirX. Taking to the X social media platform, CoinSwitch outlined why it felt the need to take legal action. It stated: "From the day of the incident, we have tried to be in constant touch with the WazirX team, seeking recovery of the funds that are stuck on their exchange. However, our efforts have not come to fruition." In a follow-up tweet, CoinSwitch assured its own users that its exposure to WazirX has no impact on user balances. The company has WazirX exposure that amounts to 2% of its overall user funds. That exposure is reduced further if WazirX’ claim that only ERC-20 tokens were affected is taken on board, accounting for 1% of CoinSwitch user deposits. White KnightWazirX co-founder Nischal Shetty spoke to the notion of a “white knight” in an affidavit submitted under the Zettai name to support the application. He outlined that WazirX is in talks with 11 crypto exchanges and has signed three non-disclosure agreements (NDAs). The company has also received offers for financing and for partnering with Zettai, the WazirX parent company. WazirX has outlined that it has set aside $12 million in digital assets to cover legal and associated costs that the company anticipates incurring as part of its restructuring efforts. Matters are further compounded by the fact that a cloud hangs over the ownership of the company. Shetty has claimed that he is no longer an owner of the exchange. In 2022, he wrote that Binance had acquired WazirX. Around the same time frame, Binance’s Changpeng Zhao (CZ) outlined that Binance didn’t control WazirX systems.  India’s economic intelligence agency, the Enforcement Directorate, has claimed in the past that Shetty has gone out of his way to obscure the ownership structure by way of a complex chain of companies in Singapore.

news
Policy & Regulation·

Oct 04, 2023

Hong Kong’s Development as Crypto Hub May Soften Chinese Stance on Crypto

Hong Kong’s Development as Crypto Hub May Soften Chinese Stance on CryptoHong Kong is making waves in the crypto sector that could potentially signal a shift in China’s attitude toward digital assets. That’s a theory that has been given consideration by crypto analytics firm Chainalysis in a recently released report highlighting Hong Kong’s crypto transformation and suggesting a growing tolerance for crypto within China’s corridors of power.Photo by farfar on UnsplashOTC trade showing resilienceDespite China’s stringent regulations and the ongoing crypto market downturn, Hong Kong’s over-the-counter (OTC) crypto market has demonstrated remarkable resilience, with a transaction volume of $64 billion in the past year. While this is slightly less than China’s $86.4 billion, it’s a noteworthy achievement considering Hong Kong’s smaller population and the challenges facing the crypto industry.The close relationship between China and Hong Kong has led some industry commentators to speculate that Hong Kong’s rise as a crypto hub could indicate a shift in China’s stance on digital assets.The crypto-friendly environment in Hong Kong has not gone unnoticed. Merton Lam of Crypto HK, an OTC digital asset trading center in the city, notes that cryptocurrencies have become an integral part of investment portfolios for banks, private equity firms, and high-net-worth individuals in the region. Even Chinese state-owned businesses are launching cryptocurrency-focused investment funds.Hong Kong cornering institutional tradeWhat sets Hong Kong apart in the crypto landscape is its proficiency in large institutional crypto transactions, with 46.8% of its annual crypto trades exceeding $10 million. In contrast, retail trades under $10,000 accounted for just 4% of the city’s crypto volume, slightly below the global average of 4.7%. This institutional dominance distinguishes Hong Kong from other Asian regions.For comparison, South Korea heavily relies on retail trading on centralized exchanges, while Japan maintains a transaction breakdown that aligns closely with global trends, balancing centralized exchanges with DeFi protocols.A cautionary noteHowever, Dave Chapman of OSL Digital Securities offers a note of caution, suggesting that Hong Kong’s promotion as a crypto hub might be more exploratory, aimed at gaining a better understanding of digital assets without significantly loosening mainland policies.Despite the uncertainties, Markus Thielen, Head of Research and Strategy at Singapore’s Matrixport, believes that Hong Kong is acting as a “testing ground” for broader cryptocurrency adoption in China. The city’s unique position makes it an attractive destination for the crypto asset management industry, setting it apart from other jurisdictions that often view crypto firms as service providers rather than end-users.Hong Kong’s progress is particularly noteworthy when considering the broader context of East Asia’s crypto market. Chainalysis analysis reveals that East Asia’s share of crypto transaction value dropped from around 30% in 2019 to less than 10% by the second quarter of 2022 due to China’s crypto bans. Hong Kong’s recent surge could potentially act as a “tailwind” to reignite crypto activity in the region.The evolving relationship between the mainland and the autonomous territory of Hong Kong may hold the key to understanding the future of cryptocurrency in the region.

news
Web3 & Enterprise·

May 03, 2023

Temasek Refutes Claims of Investment in Array

Despite reports emerging on Monday that it had invested in Array, an algorithmic currency system, Singaporean state-owned conglomerate and global investment firm Temasek has denied any such investment.In a very brief statement published to its website on Tuesday, Temasek stated:“We have seen news articles and a tweet from Array about Temasek’s investment in it. This news is incorrect. Temasek has not invested in Array and we have no relationship with them.”CoinTelegraph had taken to reporting the claim on Monday. The article had outlined a $10 million investment by the Singaporean state investor into Array, the developer of an algorithmic currency system that relies upon smart contracts and artificial intelligence. Reputational lossIf it had been true, such an investment would have been seen as a positive for the crypto space as it would be indicative of a renewed appetite for crypto-based projects from the giant Southeast Asian investor.Temasek was a key investor in failed cryptocurrency exchange, FTX. In November 2022, the company had to write down its entire investment of $275 million into the fraudulently managed exchange business. To an onlooker, a $275 million write-down may seem like an extraordinary loss.However, given that the Singaporean investing behemoth has a $403 billion dollar portfolio, the loss represents just 0.09% of that portfolio, hardly making a dent in the health of the company.The greater loss for Temasek relative to the FTX collapse has been reputational. Top tier venture capital investors like Temasek, who had otherwise been assumed to be the most diligent of actors in the professional investing world, were all sharply criticized for failing to identify the extent of the mismanagement and fraud that had occurred at the now bankrupt cryptocurrency exchange. Bogus ClaimsIn fairness to those who had reported the fake news, they were acting on information that Array had put out into the ether and as of yet, has not corrected. At the time of publication, the project’s website features a list of renowned investors including Temasek. Alongside Temasek, Array claims to have obtained investment from Standard Chartered, Coinbase Ventures, Spark Capital, Khosla Ventures, The Blackstone Group, Binance Labs, Sequoia Capital and a16z.In the case of Binance Labs, a spokesperson for the venture arm of the global exchange told The Block that it is not an investor in the project. To further dispel the claim, Temasek took to Twitter, stating:”Fake news about Temasek’s investment in @Array_Protocol. We have seen news articles and a tweet from Array about Temasek’s investment in it. This news is incorrect. Temasek has not invested in Array and we have no relationship with them.” Further instances of misinformationThe misinformation follows a similar scenario that played out with OPNX, a newly launched platform that offers spot and futures trading, alongside the ability for investors to trade bankruptcy claims.A couple of weeks ago, the platform, which had been founded by Kyle Davies and Su Zhu, the key executives behind failed crypto hedge fund, Three Arrows Capital, asserted that it had the backing of some notable investors. Almost immediately, venture capital and market maker DRW and venture capital firm Nascent denied that they were investors in OPNX.

news
Loading