Top

Remitano Struck by $2.7M Alleged Hack

Policy & Regulation·September 16, 2023, 1:21 AM

Hacks have been an unfortunate constant in the crypto and DeFi space with that reality having been compounded by news that Seychelles-based crypto exchange Remitano is believed to have been the victim of a $2.7 million heist.

Photo by Growtika on Unsplash

 

Suspicious transactions

It’s understood that the firm encountered highly suspicious transactions, with the $2.7 million having seemingly vanished from its wallet, all at the hands of a single account. The incident unfolded on Thursday and has left blockchain analysts speculating about a potential security breach.

The Remitano hot wallet initiated transfers to an address devoid of any prior transaction history. These transfers amounted to approximately $1.4 million in Tether (USDT), $208,000 in USD Coin (USDC), and 104,000 ANKR tokens (valued at $2,000 at the time). Those transfers raised concerns about the security of the platform.

Israeli blockchain analytics platform Cyvers promptly sounded the alarm, notifying the crypto community about these suspicious transactions that had drained significant sums from Remitano’s coffers. This sudden event raised concern within the crypto space and naturally among Remitano customers.

 

Tether freezes wallet address

Amid the growing apprehension, Tether, the issuer of USD stablecoin USDT, took decisive action by freezing the address associated with the alleged attacker. This swift intervention effectively halted any further movement of $1.4 million worth of drained cryptocurrency. Tether’s proactive response could potentially have prevented additional loss, preserving customers’ assets from further depletion.

Remitano had remained notably silent initially in the wake of this incident, declining to issue any formal statement regarding the breach. It has since acted, as on Friday, it published a statement relative to the issue on its website. The absence of communication from the exchange had only fueled greater speculation surrounding the incident. However, the statement outlined:

”On September 14, 2023, our Security Management team discovered a data breach from a third-party source that had compromised some of our sensitive information. As a result, a small amount of funds from the exchange’s hot wallets were transferred to suspicious wallet addresses through unauthorized withdrawal transactions.”

Remitano, recognized as a peer-to-peer cryptocurrency exchange and payment processor, primarily caters to users in emerging markets across several countries, including Pakistan, Ghana, Venezuela, Cambodia, Kenya, Malaysia, India, South Africa, Vietnam, and Nigeria.

The firm sought to reassure its customers:

”As of now, Remitano ensures that users’ assets have NOT been and will NOT be affected by this incident. We are working tirelessly to uphold our commitment to ensuring the security and protection of your crypto assets.”

Remitano was established in 2015; it is operated by Babylon Solutions Limited, which is headquartered in the Seychelles.

Unfortunately, this episode adds to the troubling trend of cryptocurrency exchange hacks witnessed in 2023. Authorities in the United States have attributed these attacks to the Lazarus Group, a notorious cyber-crime organization allegedly linked to the North Korean government which has wreaked havoc globally although disproportionately so within the Asian region.

More to Read
View All
Web3 & Enterprise·

Jul 19, 2023

Upbit Operator Dunamu Assists Indebted Youths in Rebuilding Credit Scores

Upbit Operator Dunamu Assists Indebted Youths in Rebuilding Credit ScoresDunamu, the operator of South Korean cryptocurrency exchange Upbit, has announced an initiative aimed at helping indebted youths rebuild their credit scores. The company will accept applications from July 19 through August 20. Eligible individuals must be residents of Seoul, Gyeonggi-do, or Incheon, aged between 19 and 39, and have successfully completed debt workout arrangements.Photo by Towfiqu barbhuiya on UnsplashGiving backThe project, called Dunamu Next Dream, is part of the company’s efforts to give back to the community by using revenue generated from Luna Classic (LUNC) transaction fees. In September of last year, Dunamu committed to allocating the LUNC transaction fee profits of 239.13025970 BTC to investor protection. After consulting with an external advisory committee, the exchange operator decided to donate around 3 billion KRW ($2.3 million) to public organizations and utilize the remaining funds to provide financial and credit support.To implement the Dunamu Next Dream project, Dunamu entered into a memorandum of understanding (MOU) with the Credit Counseling and Recovery Service (CCRS) and the Social Solidarity Bank (SSB) in April.Two componentsThe project consists of two main components: financial consulting and emergency loans. The initial focus will be on financial consulting, which includes support for living expenses. The aim is to assist indebted youths in developing healthier financial habits. Financial experts will provide six sessions of financial consulting, addressing their recurring indebtedness and fostering financial independence. Additionally, each individual will be granted a living expense of 1.2 million KRW ($950) to ensure they can meet timely interest payments.Dunamu will collaborate with the CCRS and the SSB to conduct a comprehensive review of applicants and select 150 deserving beneficiaries. The selection process will involve thorough evaluation through paper screening and interviews, allowing applicants to demonstrate their dedication and financial responsibility.The second component of the project, emergency lending, will launch in September. It aims to provide interest-free loans of up to 2.5 million KRW to individuals facing immediate needs, such as medical fees.Dunamu CEO Lee Sirgoo highlighted the importance of this project, emphasizing the challenges faced by young people who are the future leaders of society. The economic struggles they encounter can have significant repercussions for society as a whole. Accumulating debts has made it difficult for young individuals to achieve financial stability and advance their careers. Lee stressed the need for public awareness regarding this issue, as it is crucial for young people to establish themselves promptly within society.

news
Policy & Regulation·

Oct 04, 2023

GSR Gets on Path Towards Full Regulatory Approval in Singapore

GSR Gets on Path Towards Full Regulatory Approval in SingaporeGSR Markets Pte. Ltd., the Singaporean subsidiary of the global crypto trading firm GSR, has reached a significant milestone in its quest to become a fully licensed entity within the city-state. On Monday, the Monetary Authority of Singapore (MAS) granted GSR in-principle approval for a Major Payment Institution (MPI) license.Photo by Mike Enerio on UnsplashTrading licenses filtering throughThis development mirrors similar approvals granted to other crypto firms in the region, solidifying Singapore’s status as a hub for crypto and Web3 innovations. The approval of GSR’s MPI license follows hot on the heels of Coinbase Singapore’s announcement of securing a full Major Payment Institution license from MAS.Other companies such as Circle, Blockchain.com, and Crypto.com have also obtained MPI licenses this year. These developments underscore the competitive yet regulated landscape of the cryptocurrency market in Singapore.In-principle approvalThe in-principle approval from MAS empowers GSR to provide crypto and fiat-related services to Singaporean residents and entities. This includes the ability to conduct payment services without the limitations of single transaction thresholds (SGD 3 million) and monthly limits (SGD 6 million). GSR’s CEO, Jakob Palmstierna, expressed gratitude for MAS’s constructive oversight, which has played a pivotal role in shaping the evolving digital asset landscape in Singapore. Palmstierna stated:“We are immensely grateful to MAS for their constructive oversight, which helps shape a growing digital asset ecosystem that we feel proud to be a substantial part of.”Meanwhile, GSR’s COO Xin Song, emphasized the importance of this approval, stating that it enables them to “deepen our local client partnerships and continue in our critical role as a liquidity provider within the ecosystem.”GSR’s presence in Singapore aligns with the country’s burgeoning crypto-friendly environment. Recent surveys indicate that 25% of Singaporeans view cryptocurrency as the future of finance, with 32% having some involvement in crypto ownership. Moreover, Singapore boasts over 700 Web3 companies, positioning itself as a pivotal market for the expansion of the crypto and Web3 economy.Company ambitionsGSR, established in 2013 in New Jersey, offers a diverse range of services, including over-the-counter crypto trading, derivatives trading, market making, and venture capital investments. The firm is no stranger to regulatory compliance, holding Money Service Business licenses across several US states.The company was founded by former Goldman Sachs Executives Rich Rosenblum and Cristian Gil. At the height of the last crypto bull run, the crypto market maker had plans “to add 100 hires every six months for the next few years.” No doubt that ambition has been scaled back since then, given the protracted bear market which has followed.Last month, Gil became embroiled in a spat with Andrei Grachev of rival market making firm, Singapore-based DWF Labs.GSR’s recent attainment of in-principle approval for a Major Payment Institution license from MAS reinforces Singapore’s position as a leader in the crypto space. The firm’s interest in pursuing a compliant route forward and its role as a liquidity provider bode well for both GSR and the broader crypto community in the Asia-Pacific region.

news
Policy & Regulation·

Jan 02, 2025

Regulator pulls plug on Bybit in Malaysia

In Malaysia local regulator the Securities Commission has ordered global crypto exchange platform Bybit to shut down its operations within Malaysia as part of enforcement actions being taken by the regulator against the company.Photo by Esmonde Yong on UnsplashOperating without registration The Securities Commission published a statement to its website late last week outlining that both Bybit and its CEO Ben Zhou had been reprimanded for carrying out digital asset trading activities in Malaysia without having completed the necessary registration. The regulator also pointed out that both Zhou and his company have been listed on its Investor Alert List since July 2021. The Securities Commission took the opportunity to remind investors that they should only deal with what it termed “Recognized Market Operators” (RMOs), a designation it applies to entities that have completed registration with the regulator. Investors who utilize unregistered platforms are not extended any form of protection under Malaysian securities law, the Securities Commission warned, adding that such platforms could put them at risk of fraud and implicate them in money laundering activity potentially. Enforcement actions Bybit has been directed by the regulator to disable its website and mobile applications that are currently targeting Malaysian investors within 14 business days from Dec. 11.  The regulator also wants the company to curb other forms of promotion aimed at Malaysian investors. With that, it has requested that the company take down its Telegram-based support channel for Malaysian customers. Advertising activity, including social media posts, must also cease in cases where such activity is aimed at Malaysian investors. The Securities Commission acknowledged that thus far, Bybit has been compliant with its latest enforcement requests. Intentions to secure licensing Bybit has responded to these developments on its Bybit Malaysia Telegram channel, stating that the company understands that these actions “may cause some inconvenience” to Malaysian customers. “Once we have secured the appropriate licenses, we look forward to reconnecting with you again in the future,” it added. The enforcement action is likely to be a setback for Bybit given that the firm appeared to be focusing on the Malaysian market of late. In June it emerged that the company was moving to relocate Chinese employees to both Malaysia and Dubai.  This is not the first occasion in which Malaysia’s Securities Commission has taken action against a crypto platform. In 2023 the commission ordered the closure of the Malaysian operations of global exchange Huobi (subsequently rebranded as HTX). The circumstances in that instance were similar in that it acted against the exchange and its CEO for operating illegally within the Malaysian market. Within the Malaysian market, only six trading platforms have been registered. These include Hata Digital, Luno, MX Global, Sinegy, Tokenize Technology and Torum International. Earlier the Securities Commission acted similarly in prohibiting Atomic Wallet from operating within Malaysia given its failure to register its digital asset exchange activities. 

news
Loading