Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Web3 & Enterprise·

Dec 18, 2023

Wemade to unveil upgraded DAO platform Wepublic in February

Wemade to unveil upgraded DAO platform Wepublic in FebruarySouth Korean gaming publisher Wemade’s blockchain-powered social platform Wepublic is scheduled to undergo a revamp this coming February, according to an official press release on Wemade’s website on Monday (KST).Photo by Christin Hume on UnsplashDecentralized empowermentWepublic is a platform that employs decentralized protocols to allow a wide variety of official organizations — from political and religious factions to non-profit organizations — to build and operate decentralized autonomous organizations (DAOs) based on the transparent sharing of the status of their funds.Through its integration of blockchain technology, Wepublic guarantees the transparency and integrity of all information and records stored on its platform, safeguarding them against counterfeiting and diversion. The platform notably emphasizes the ability of all participants in a DAO to partake in organizational activities and democratic decision-making.Major overhaulThe upcoming second version, Wepublic 2.0, will extend access to individuals and non-official groups. In particular, a new feature called Wepublic Point will be added, which will enable donations and further solidify the platform’s decentralized protocols. The platform will also offer connectivity with social media platforms, boosting accessibility.Wemade stated that it is currently recruiting the first cohort for Wepublic’s support group, Wepublic Supporters, which will be responsible for planning and executing promotional projects on the platform for 12 weeks starting from Jan. 25. College and postgraduate students are eligible to apply until Jan. 13. Those who stand out with their performance will get the opportunity to apply for an internship at Wemade.

news
Web3 & Enterprise·

Aug 25, 2023

Dunamu Distributes 4,100 NFTs for Climate Change Campaign

Dunamu Distributes 4,100 NFTs for Climate Change CampaignDunamu, the operator of the South Korean cryptocurrency exchange Upbit, announced that it has distributed 4,100 non-fungible tokens (NFTs) from the Climate-sensitive Biological Indicator Species (CBIS) list in collaboration with four agencies under the Ministry of Environment — the National Institute of Biological Resources, the Nakdonggang National Institute of Biological Resources, the Honam National Institute of Biological Resources, and the National Institute of Ecology. This comes as part of efforts to raise awareness about the importance of biodiversity and habitat protection amid the threat of climate change.Photo by Yiju Cheng on UnsplashThemed NFTs for conservationThe CBIS list outlines species whose seasonal activities, habitat area, and population size are susceptible to being impacted by climate change, thus requiring continuous observation and management by the government.Dunamu, along with the four environmental institutions, minted NFTs representing 15 different species from the list — such as the white eye bird and the camellia tree — to distribute to participants of their Resource Circulation Climate Action Campaign.The latest round of NFT distributions was carried out in collaboration with the Honam National Institute of Biological Resources from May 19 to August 11. It is the first of four to be carried out over the course of the year following their initial announcement to do so in May.Empowering climate action beyond boundariesParticipants showed a positive reaction to the utilization of emerging technologies such as NFTs and the metaverse, which enabled them to contribute to climate change efforts without the limits posed by time and space. By organizing fun missions within the metaverse and gifting NFTs to participants, Dunamu and the environmental agencies were able to highlight the severity of the climate crisis while simultaneously making the concept of resource circulation more accessible and easier to understand. Dunamu reported that during the three-month period of the first campaign, the designated campaign space within Dunamu’s metaverse platform, 2ndblock, also racked up a cumulative visitor count of 73,000 users.The second campaign has also commenced and is running from now until October 2. This time around, Dunamu is working with the Nakdonggang National Institute of Biological Resources to issue 1,000 NFTs of four species: the tree frog, barn swallow, kumgang minnow, and little egret. Noteworthy artists will also contribute to creating the NFTs, including those from the Botanical Artist Society of Korea.In order to partake in the campaign, participants must complete the stamp-collecting mission in the campaign space on 2ndblock. Lucky participants who are chosen to receive NFTs must register their issued gift code on Upbit’s NFT marketplace.“As a result of our deliberation on ways to contribute to the environment and society with our technology and resources, many people have shown interest in our online and in-person climate efforts,” said Lee Sirgoo, CEO of Dunamu. He also expressed hopes for continued participation and support for the remaining NFT distributions and campaigns to promote environmental protection and biodiversity conservation.This collaboration between the private and public sectors which combines online and in-person activities stands out as an innovative method for combatting climate change.

news
Policy & Regulation·

Mar 27, 2024

Korean financial authority to heighten oversight on token listing with new guidelines

The South Korean financial authority will establish new policies and guidelines for token listing and provide admirable examples from past listing events for local exchanges to follow, according to local media outlet News1.  So far, fiat-to-crypto exchanges in Korea have been listing tokens on their platforms under a guideline issued by Digital Asset eXchange Alliance (DAXA) – a self-regulatory consultation group comprised of five major Korean crypto exchanges. The existing DAXA guideline outlines basic yet vague instructions, which have allowed exchanges to list tokens largely at their discretion.  However, the new guideline from the financial authority, expected to be released by this June, will mark the government’s first official manual on token listing. This is in line with the upcoming Virtual Asset User Protection Act, which will be effective in July. Photo by Hitesh Choudhary on UnsplashSetting clear guidelines for token listingsThe new guidelines are expected to include examples of past fraud detection and real-time monitoring cases which are deemed to have set precedents for the industry players. Moreover, the financial authority plans to distribute past exemplary cases of token listing as early as April, which is anticipated to set a model listing process and help local crypto exchanges adhere to the law and requirements.  This announcement comes after the local game company Wemade relisted its native token WEMIX on Korbit, one of DAXA's member exchanges, just a year after it was delisted on major exchanges due to its deviant practices in token issuance. The relisting of WEMIX has since raised concerns among crypto insiders about the lack of criteria regarding token listings. More refined token listing process As the crypto market's bullish trend continues, Bithumb and Coinone – the second and third-largest exchanges in Korea – are stepping up their efforts to speed up the listing of new coins. Industry experts expect these exchanges will double down on their efforts in screening and reviewing processes for tokens to align with the new guidelines in the future.  An official from the Korean Financial Intelligence Unit (FIU) said that while the anticipated listing process is not legally binding, it will definitely have a more profound impact on local crypto exchanges compared to the self-regulated DAXA guidelines.  

news
Loading