Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Policy & Regulation·

Dec 19, 2023

Kazakhstan sets sights on 2024 expansion amid CBDC pilot success

Kazakhstan sets sights on 2024 expansion amid CBDC pilot successKazakhstan’s central bank digital currency (CBDC), the digital tenge, has completed a one-month pilot project, paving the way for significant advancements in business, regulation and technology in 2024.Photo by Nessi Gileva on UnsplashReal-world use through Onay cardThe National Bank of Kazakhstan (NBK) established the National Payment Corporation (NPK) in September. NPK is a dedicated entity that’s responsible for spearheading the launch and development of the digital tenge.At that time, the CBDC pilot phase had advanced to controlled environment use. Global exchange Binance has been actively involved with the project. It supported the pilot by way of its BNB Chain.During the pilot phase, the digital tenge played a pivotal role in providing free school lunches to children in Almaty, Kazakhstan’s largest city. The initiative utilized the local Onay card, initially designed for the transit system and transactions were facilitated by Kazpost, the Kazakh postal system operator.Local banking partnersNPC Chairman Binur Zhalenov became the first person to transact using the digital tenge in November. At the time, it was revealed that Eurasian Bank was one of the local banking participants on the project.Eurasian collaborated with Visa and Mastercard, alongside three other local banks, distributing plastic cards to focus group members. These cards empowered users to make both in-person and online purchases, with the added functionality of cash withdrawals from ATMs.Participating merchants were given the flexibility to accept digital tenge directly or convert them into “non-cash” tenge. The converted funds seamlessly integrated into existing point-of-sale (POS) and QR systems, demonstrating interoperability within and outside Kazakhstan.The success extended beyond local transactions, with further experiments involving cross-border payments via SWIFT, issuance of CBDC-backed stablecoins on platforms like Binance and the Kazakhstan Stock Exchange, tokenization of gold, value-added tax collection through smart contracts and the trial of a “move-to-earn” app.New objectivesWith an eye on the upcoming year, the National Bank of Kazakhstan and the National Payment Corporation (NPC) have set ambitious objectives. Plans include expanding the network of intermediary banks and advancing decentralized finance applications. A primary focus is on enabling offline transactions on a large scale to enhance financial inclusion in regions with limited internet connectivity.Anticipated developments also include increased participation in cross-border payment projects, such as Project mBridge, an experimental multi-CBDC platform being coordinated and developed by the central bank of central banks, the Bank for International Settlements. Regulatory and legislative goals are on the agenda, alongside efforts to enhance the security and processing speed of the digital tenge.While addressing privacy concerns, Zhalenov emphasized in interviews that the digital tenge will not be utilized for user surveillance. Previously, Zhalenov has also alluded to the versatility of the digital tenge due to its programmable nature, citing smart contracts in particular as having great potential.The successful pilot project and the ambitious plans for 2024 position Kazakhstan’s digital tenge as a promising development in the realm of CBDCs, showcasing the central Asian nation’s positive approach to innovation and financial inclusivity.

news
Web3 & Enterprise·

Jun 16, 2025

KuCoin Thailand moves to full platform launch

Seychelles-headquartered global crypto exchange KuCoin has announced the full launch of its affiliate in Thailand. KuCoin Thailand was first presented by KuCoin back in April. The affiliate company emerged through a rebranding of local digital asset exchange, ERX. The renamed entity continues to be operated by ERX Company Ltd., while benefiting as a KuCoin affiliate from its global market presence and global exchange infrastructure.Photo by Bradley Prentice on UnsplashERX platform users onboardedSince that initial announcement, the exchange has been operated by onboarding users on an invite-only basis. All of the original ERX platform users have been ported across to KuCoin Thailand. In a statement published to its website on June 13, KuCoin Thailand pointed out that it is moving on from that invite-only phase to fully launch the platform.  It asserted that the platform is fully licensed by Thailand’s Securities and Exchange Commission (SEC) and it has now proceeded to full launch with no further access restrictions. In tandem with the full public launch of the platform, the company indicated that it was running a special rewards initiative with a prize pool of one million Thai Baht ($30,845) and introducing a new brand mascot named “Kuku.” In a press release, KuCoin claimed that “this marks the first fully regulated local digital asset exchange under KuCoin's brand,” contributing towards the company’s goal “to build fast, secure, and user-friendly infrastructure for crypto users” globally. Strengthening KuCoin’s presence in Southeast AsiaKuCoin CEO BC Wong described the launch as “a significant milestone in [the company’s] global compliance journey.” He added: “From being the first global exchange to register with India's FIU to now launching the first local compliant platform in Thailand, this marks a significant step toward strengthening our presence in the fast-growing markets of South East Asia.” In discussion with Cointelegraph, the KuCoin CEO provided an insight into how the company is approaching global growth while focusing on local market considerations. He stated: “While KuCoin Global supports a wide range of products for international users, we plan to expand locally in line with regulations and market demand.” Wong confirmed that the newly branded entity facilitates crypto spot trading for its users, with Thai Baht-based on and off ramps. Regulator & police enforcementThailand’s SEC moved to block five cryptocurrency platforms from accessing investors resident in Thailand late last month. The exchanges, OKX, Bybit, CoinEx, XT.com and 1000X.Live, were deemed to have been offering their services in Thailand on an unlicensed and unauthorized basis. In addition to blocking access, criminal complaints have been filed against all five exchanges. Thai police have also been busy recently with crypto-related enforcement. Last month, a Vietnamese woman was arrested on the basis of her alleged involvement in a crypto-related scam that saw 2,600 victims lose a total of $300 million. On June 12, Bangkok-based news platform Khaosod English reported that a Chinese man had been arrested in connection with a $6 million Bitcoin fraud case.

news
Policy & Regulation·

Apr 11, 2023

Singapore Gets with Banks to Provide Guidance on Crypto Businesses

Singapore Gets with Banks to Provide Guidance on Crypto BusinessesIn a move to provide clarity and guidance to financial institutions dealing with cryptocurrencies, the Monetary Authority of Singapore (MAS) is reportedly working with banks to develop new vetting procedures for crypto clients.According to a recent Bloomberg report, the MAS plans to provide more detailed guidance to banks on how to properly screen and monitor customers involved in cryptocurrency transactions.©Pexels/PixabayRegulatory clarityThe decision to provide guidance on crypto businesses comes as regulators around the world struggle to keep up with the rapidly-evolving digital currency industry. Many governments have been grappling with how to regulate cryptocurrencies in the face of concerns over money laundering, fraud, and other illicit activities.Singapore, however, has taken a more progressive stance on digital currencies, with the MAS recently announcing plans to create a regulatory framework for crypto derivatives trading. The country’s financial watchdog has also been working to improve AML (anti-money laundering) and CFT (combating the financing of terrorism) measures relative to crypto transactions.The MAS’s efforts to provide guidance to banks on crypto businesses are part of this broader push to promote responsible use of digital currencies in Singapore. By providing clear and detailed guidance to financial institutions, the regulator hopes to prevent illegal activities from taking place while also promoting the growth of the crypto industry.The MAS’s approach is seen as a positive development for the crypto industry, as it provides a clear framework for financial institutions to work within. This could help to boost confidence in the crypto market, potentially leading to increased investment and adoption.Striking the right balanceAt the same time, however, some industry observers have expressed concerns that overly strict regulations could stifle innovation and limit the potential of cryptocurrencies. They argue that a balance must be struck between protecting consumers and promoting innovation in the digital currency industry.Despite these concerns, the MAS’s efforts to provide guidance on crypto businesses are likely to be welcomed by financial institutions and industry participants alike. As the use of digital currencies continues to grow, it is becoming increasingly important for regulators to provide clear and comprehensive guidance on how to operate within this rapidly-evolving industry.Previous failuresSingapore hasn’t always gotten its approach to cryptocurrency right. In 2021, the MAS put global crypto exchange Binance on its investor alert list. Binance felt compelled to curb its service offering in the city state. The consequence of that action was that a disproportionate number of Singaporeans proceeded to open accounts with FTX only later to get caught up in the collapse of the exchange.The Monetary Authority of Singapore’s decision to provide guidance on crypto businesses is bullish for the digital currency industry. By providing clear and detailed guidance to financial institutions, the regulator is promoting responsible use of cryptocurrencies in Singapore while also boosting confidence in the market. However, there is a need to strike a balance between protecting consumers and promoting innovation in the industry, as overly strict regulations could stifle growth and limit the potential of cryptocurrencies.

news
Loading