Top

Remitano Struck by $2.7M Alleged Hack

Policy & Regulation·September 16, 2023, 1:21 AM

Hacks have been an unfortunate constant in the crypto and DeFi space with that reality having been compounded by news that Seychelles-based crypto exchange Remitano is believed to have been the victim of a $2.7 million heist.

Photo by Growtika on Unsplash

 

Suspicious transactions

It’s understood that the firm encountered highly suspicious transactions, with the $2.7 million having seemingly vanished from its wallet, all at the hands of a single account. The incident unfolded on Thursday and has left blockchain analysts speculating about a potential security breach.

The Remitano hot wallet initiated transfers to an address devoid of any prior transaction history. These transfers amounted to approximately $1.4 million in Tether (USDT), $208,000 in USD Coin (USDC), and 104,000 ANKR tokens (valued at $2,000 at the time). Those transfers raised concerns about the security of the platform.

Israeli blockchain analytics platform Cyvers promptly sounded the alarm, notifying the crypto community about these suspicious transactions that had drained significant sums from Remitano’s coffers. This sudden event raised concern within the crypto space and naturally among Remitano customers.

 

Tether freezes wallet address

Amid the growing apprehension, Tether, the issuer of USD stablecoin USDT, took decisive action by freezing the address associated with the alleged attacker. This swift intervention effectively halted any further movement of $1.4 million worth of drained cryptocurrency. Tether’s proactive response could potentially have prevented additional loss, preserving customers’ assets from further depletion.

Remitano had remained notably silent initially in the wake of this incident, declining to issue any formal statement regarding the breach. It has since acted, as on Friday, it published a statement relative to the issue on its website. The absence of communication from the exchange had only fueled greater speculation surrounding the incident. However, the statement outlined:

”On September 14, 2023, our Security Management team discovered a data breach from a third-party source that had compromised some of our sensitive information. As a result, a small amount of funds from the exchange’s hot wallets were transferred to suspicious wallet addresses through unauthorized withdrawal transactions.”

Remitano, recognized as a peer-to-peer cryptocurrency exchange and payment processor, primarily caters to users in emerging markets across several countries, including Pakistan, Ghana, Venezuela, Cambodia, Kenya, Malaysia, India, South Africa, Vietnam, and Nigeria.

The firm sought to reassure its customers:

”As of now, Remitano ensures that users’ assets have NOT been and will NOT be affected by this incident. We are working tirelessly to uphold our commitment to ensuring the security and protection of your crypto assets.”

Remitano was established in 2015; it is operated by Babylon Solutions Limited, which is headquartered in the Seychelles.

Unfortunately, this episode adds to the troubling trend of cryptocurrency exchange hacks witnessed in 2023. Authorities in the United States have attributed these attacks to the Lazarus Group, a notorious cyber-crime organization allegedly linked to the North Korean government which has wreaked havoc globally although disproportionately so within the Asian region.

More to Read
View All
Policy & Regulation·

Sep 21, 2023

Philippines Regulator Collaborates with US Counterpart to Tackle Crypto Fraud

Philippines Regulator Collaborates with US Counterpart to Tackle Crypto FraudThe Philippines Securities and Exchange Commission (SEC) has taken a step towards addressing the escalating issue of crypto scams, seeking assistance from its namesake and international counterpart, the US SEC.The international partnership was announced via a Philippines SEC press release, published last Friday. The collaboration highlights the severity of a growing problem in terms of crypto-related fraud, underscoring the importance of inter-agency cooperation in tackling the issue.Photo by Krisia on PexelsJoint training effortsBoth SECs will engage in joint training sessions. The collaboration also involves cooperation with the Asian Development Bank (ADB), and it has been established under the umbrella of the International Organization of Securities Commissions (IOSCO). Notably, the Philippines SEC has also signed IOSCO’s Multilateral Memorandum of Understanding (MoU) aimed at addressing crypto scams.The motivation behind these collaborative efforts is readily apparent given the scale of the cryptocurrency fraud that has occurred recently in the Philippines. Recent instances have captured the attention of the authorities, emphasizing the urgent need for regulatory action.Drawing on overseas enforcement experienceMost in the crypto sector are not enamored with US SEC Chair Gary Gensler’s stance relative to digital assets. Notwithstanding that, it may be that his assertive approach to enforcement may have a place in the Philippine context, given the extent of the issue of crypto fraud in the Southeast Asian country. For example, Gensler’s call for “more cops on the beat” to police the crypto industry, expressed in a Bloomberg Daybreak Podcast interview in July, resonates with the Philippines’ current predicament.Though Gensler’s remarks have been met with resistance from some quarters within the crypto industry, they may serve as sage advice in a climate where crypto-related crimes proliferate.Philippines SEC Chair Emilio Aquino outlined that the collaborative workshop involving the two securities commissions was aimed towards strengthening the capability of the Philippines’ SEC enforcement personnel in conducting investigations on securities-related crimes like insider trading, market manipulation, off-market fraud, and crypto scams.Aquino stated: “Scammers are becoming more advanced and sophisticated in their techniques as new technologies arise. As such, the SEC must constantly improve its investigation and enforcement capabilities to ensure that we are always one step ahead in preventing scams.”The Philippines, in particular, could benefit from a more robust regulatory presence to combat human trafficking networks and quash scams that tarnish the reputation of the crypto sector. These criminal activities have unfortunately led many to associate cryptocurrencies with fraud.The Philippines SEC Chair added that collaboration with US regulators and other enforcement agencies would likely guide the country in its pursuit of initiatives that lead towards the protection of the investing public.While expert training is essential, bolstering regulatory oversight, as suggested by Gensler, may be the key to mitigating the pervasive problem of crypto-related crime and protecting the integrity of the cryptocurrency sector.

news
Policy & Regulation·

Jan 12, 2024

South Korean FSC prohibits domestic securities firms from brokering spot bitcoin ETF

The South Korean Financial Services Commission (FSC) made an official announcement on Friday (KST) stating that "domestic securities firms brokering spot bitcoin ETFs that are listed on overseas markets may be considered a violation of the government's stance on virtual assets and the Financial Investment Services and Capital Markets Act." This stance refers to a press release published on Dec. 13, 2017 that outlined the government’s conclusion that virtual assets must be dealt with carefully.Photo by Lauren Seo on UnsplashFuture possibilityHowever, this statement is not to be interpreted as a complete dismissal of the possibility that South Korea could adopt the ETF. The agency added that it would look into the issue thanks to a more stable regulatory landscape sweeping the country following the implementation of regulations on virtual assets like the Virtual Asset User Protection Act. Authorities are also taking into consideration the fact that other countries like the U.S. are adopting a more open stance. Market downturnFollowing the announcement, stocks related to the ETF in the South Korean market – which had surged on the news of a spot bitcoin ETF listing on the U.S. stock market a day ago – saw share prices drop within a day. As of 10:04 a.m. on Friday, Woori Technology Investment was trading at KRW 7,650 ($5.82), down 4.61 percent from the day before, and Hanwha Investment & Securities was down 9.09 percent to KRW 4,000. Both of these firms hold stakes in Dunamu, the operator of South Korea's largest cryptocurrency exchange Upbit.

news
Policy & Regulation·

Apr 21, 2023

Korea’s FSS Seeks to Protect Investors from Crypto Exploit Losses

Korea’s FSS Seeks to Protect Investors from Crypto Exploit LossesLee Bokhyun, Governor of the Korean Financial Supervisory Service, said the agency will seek to protect investors from losses resulting from cryptocurrency exchange exploits, according to Korean newspaper Donga Ilbo.©Pexels/RODNAE ProductionsEfforts to enact legislationWhile delivering a congratulatory speech at a forum co-hosted by Donga Ilbo and its subsidiary broadcasting company Channel A on Wednesday, Lee underlined that the agency will be committed to enacting legislation that obligates crypto exchanges to be held accountable for customer asset losses caused by hacks.He explained that amidst a continued crypto winter triggered by multiple failures, such as the collapse of the stablecoin Terra last year, cases of security vulnerabilities are subsequently occurring.Cold wallet requirementsIn response to this situation, financial authorities and the National Assembly are collaborating on legislation that would require crypto exchanges to store a portion of their custody assets in cold wallets, which are disconnected from the Internet, or face liability for damages resulting from hacks.A February report from blockchain data platform Chainalysis showed that losses to crypto hacks last year amounted to $3.8 billion. Earlier this month, Korean crypto exchange GDAC suffered an exploit of 20 billion KRW (~$15 million).Lee said the agency will work with the financial industry to bolster the fraud detection system and build an immediate response system that prevents uncanny transactions when abnormalities are detected. These efforts are to curb the rise in financial crimes, which followed the growing popularity of remote banking services.Experts’ inputsAt the event held to discuss the protection of consumer information in the digital age, senior researcher Kim Gap-rae at Korea Capital Market Institute said that a law should be introduced to penalize unfair practices, such as market manipulation and use of undisclosed information, in the virtual asset market.Lee Joo-hwan, head of the information security management division at Hana Bank, suggested the approach used in the US, which is recovering ill-gotten gains from financial crimes to compensate victims.Kang Byung-hoon, a professor who teaches cyber security at KAIST, anticipated that the financial industry would accelerate the adoption of confidential computing, a highly secure system, to which even administrators have limited access.

news
Loading