Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Policy & Regulation·

Jul 29, 2023

Indian Supreme Court Scolds Government over Crypto Regulation Delay

Indian Supreme Court Scolds Government over Crypto Regulation DelayThe Indian Supreme Court did not mince words recently as it criticized the Union government for its failure to establish clear cryptocurrency regulations in the country.Photo by Studio Art Smile on PexelsLack of crypto clarityThat’s according to a report published by local media outlet, the Hindustan Times, on Friday. It’s understood that the Supreme Court is frustrated with regard to the lack of guidelines surrounding cryptocurrencies. That frustration has arisen as crypto is increasingly coming to the attention of the courts due to it being associated with a rising number of criminal activities.The court directed the government to provide information about any plans to set up a dedicated federal agency to investigate crypto-related crimes. During the proceedings, Justices Surya Kant and Dipankar Datta expressed their disappointment, pointing out the absence of any concrete laws pertaining to cryptocurrencies.Crypto bill failingsThe context for the court’s remarks was the ongoing hearing of petitions related to cryptocurrency fraud cases across different states in India. In light of the gravity of these cases, the court demanded a response from the government regarding its capability to establish an effective mechanism to investigate crypto-related crimes.The struggle for clear and comprehensive crypto regulations in India has been long-standing. As far back as 2018, the government was instructed by the Supreme Court to draft a crypto bill, but progress has been slow. The government has continually promised to provide legislative clarity over the past few years. Despite this, the final draft of the crypto bill has not been produced.Crypto taxesGovernments may drag their feet when it comes to regulatory clarity relative to unfolding innovations but they’re far more responsive when it comes to taxes. The Indian government acted swiftly to impose crypto taxation laws, which took effect in April 2022.During that bull market period, India emerged as one of the leading crypto markets, witnessing the rise of several crypto unicorns and significant trading volumes amounting to billions of dollars. However, the introduction of tax laws had an adverse impact on the thriving crypto industry. Added to that, the lack of regulatory clarity caused many established firms to relocate from India, seeking more favorable environments for their operations.Market potentialDespite the government’s lethargic legislative response and heavy-handed tax policy, there are still reasons for optimism with regard to the development of crypto in India. India’s fintech sector is the third largest in the world, driven more recently by rapid digital adoption, together with efforts to bring about financial inclusion.Last month, Xapo Bank, a Gibraltar-based crypto bank, was sufficiently encouraged by the potential offered in India to enter the Indian market. Earlier this week, the world’s largest asset manager, BlackRock, announced that it was partnering with Jio Financial and re-entering the Indian market after a six-year hiatus.The move could have implications for crypto in India given that BlackRock has changed its tack on crypto, having recently filed an application to launch a bitcoin exchange-traded fund (ETF) in the United States.Notwithstanding these developments, concrete regulatory guidelines will not only protect against criminal activities but also foster a conducive environment for legitimate innovation and growth in the cryptocurrency space.

news
Web3 & Enterprise·

Oct 19, 2024

Singapore’s DBS introduces Token Services for institutions

Singapore’s largest bank in terms of assets under management (AUM), DBS Bank, has introduced “DBS Token Services,” an offering it describes as “a new suite of banking services that integrate tokenisation and smart contract-enabled capabilities with its award-winning banking services.” The bank announced details of the new service offering via a press release published on its behalf by PR Newswire on Oct. 18. The product caters towards the needs of DBS Bank’s institutional clients, with the objective of unlocking operational efficiencies and transaction banking capabilities.  The product suite includes DBS Treasury Tokens, conditional payments and programmable rewards, with the latter allowing institutions to program and manage the use of funds. The products run on the bank’s permissioned blockchain, while being Ethereum virtual machine (EVM) compatible.Photo by Shubham Dhage on UnsplashRunning on permissioned blockchainThe bank pointed out the implications of operating the service over a permissioned blockchain network, stating:”Using a permissioned blockchain provides DBS full control over these services, enabling the bank to harness the benefits of blockchain technology while adhering to compliance standards.” Permissioned networks utilize distributed ledger technology (DLT) but they don’t truly embrace decentralization. They’ve proven popular with traditional financial services companies who want to still maintain ultimate control over the network. Conditional paymentsThe bank’s new product suite integrates tokenization and smart contract capabilities with existing conventional services. Those smart contracting capabilities make programmability an accessible feature for institutions relative to fund governance.  With that, conditional payments are likely to lead to an improvement in payment workflows for institutions. The bank believes that this aspect of its latest offering builds upon a recent pilot project that DBS engaged in alongside Enterprise Singapore and the Singapore Fintech Association (SFA). That project involved the utilization of blockchain technology, and in particular smart contracting, for the purpose of distributing government grants. DBS Token Services has been integrated with the bank’s core payment engine and various other banking sector payment infrastructures. Treasury Tokens enable institutional clients to settle multi-currency intra-group transactions across multiple markets instantaneously, 24/7. Back in August DBS partnered with digital payments provider Ant International, an affiliate of Chinese conglomerate Alibaba Group, on a pilot project involving blockchain-based treasury and liquidity management using Treasury Tokens. DBS Bank’s Group Head of Global Transaction Services, Lim Soon Chong, claimed that "by leveraging tokenisation and smart contract capabilities, DBS Token Services enables companies and public sector entities to optimise liquidity management, streamline operational workflows, strengthen business resilience, and unlock new opportunities for end-customer or end-user engagement.” Chong added that the new service is a leap forward in transaction banking, demonstrating “how established financial institutions can leverage blockchain technology to deliver new ground-breaking features and experiences.” Embracing blockchainDBS is an outlier in TradFi relative to blockchain and digital assets insofar as it has delved much deeper into the emerging technology by comparison with the majority of its peers. Last month, the company announced that it plans to introduce over-the-counter (OTC) crypto options trading and structured notes for institutional clients during Q4 2024. Earlier in the year, it participated in a proof of concept for FX payment versus payment (PvP) settlement on the blockchain of Singapore-based unified ledger market infrastructure firm Partior.

news
Markets·

Dec 30, 2023

OKX delisting sparks privacy coin price slump

In a move announced on Friday, OKX, the Seychelles-headquartered cryptocurrency exchange, declared its decision to delist 20 trading pairs by Jan. 5, triggering a notable price fall for major privacy coins such as Monero, Dash and ZCash. The exchange cited that the affected pairs did not align with its listing criteria, though specific details were not disclosed.Photo by Khara Woods on UnsplashPrivacy coin delisting trendWhile OKX did not explicitly articulate the rationale behind this move, industry observers are speculating that it could be part of the exchange’s broader efforts to comply with evolving regulatory measures. Privacy coins have increasingly drawn regulatory scrutiny due to concerns about potential illicit activities within the crypto space. Earlier in the year, Binance had also announced the delisting of several privacy coins to ensure compliance with local laws and regulations. The broader context of regulatory pressures on privacy-focused cryptocurrencies seems to be impacting major exchanges’ decisions. In 2022, Huobi cited regulatory pressures when it took the decision to delist Monero and other privacy coins. Kraken was further ahead of the curve still, delisting Monero for UK customers in November 2021. Downward price actionFollowing OKX’s announcement on Friday, the prices of privacy-focused cryptocurrencies, notably Zcash (ZEC) and Monero (XMR), experienced a decline. The entire sector of “privacy cryptos” has witnessed a 7.1% decrease in overall market capitalization, according to an index of such coins compiled by Malaysian crypto indexing firm CoinGecko. During this period, Monero and Zcash have seen unit price declines of 4.5% and 10.7%, respectively. Other tokens set for delisting, including Dash, Powerpool and Horizen, have recorded declines of up to 14%. OKX has provided guidance to users, advising them to cancel orders related to the affected trading pairs before the delisting date to avoid automatic cancellation, a process that may take 1–3 working days. Concurrently, the exchange has halted deposits for the impacted cryptocurrencies and plans to cease withdrawals by Mar. 5, 2024, affording holders sufficient time to withdraw their assets. However, once the delisting is complete, trading these digital assets on OKX will become impossible. Interestingly, certain privacy coins like MINA continue to be listed on the exchange, experiencing a 7.5% increase following the delisting announcement. It’s crucial to note that OKX’s delisting is not exclusive to privacy tokens, as it also includes other trading pairs associated with digital assets such as Kusama, Flow, Kyber Network and Aragon. The fight for privacySome crypto community members have voiced their concerns on social media, with many fearing that the innovation may be ‘captured’ by the various state authorities over time. However, ex-Monero developer Ricardo Spagni (AKA “Fluffypony”) was nonchalant about the whole thing, judging by his comments. In a post on social media platform X, he wrote: ”Monero users and contributors literally couldn’t care less about delistings at this point.” As the regulatory landscape evolves, cryptocurrency exchanges are navigating these challenges, impacting the availability and value of specific tokens on their platforms. Investors and privacy advocates alike will be closely watching how such regulatory compliance measures continue to shape the crypto market and crypto use.  

news
Loading