Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Policy & Regulation·

Jul 12, 2023

China Unveils Offline SIM Card Wallet for Digital Yuan Payments

China Unveils Offline SIM Card Wallet for Digital Yuan PaymentsThe People’s Bank of China (PBoC) has announced a new offline SIM card-based solution for its digital yuan, enabling users to make payments even with their phones switched off.Photo by Sumeet Singh on UnsplashEmbedded hardwareThe innovative initiative was revealed via a social media post on Monday. It aims to reach users with 2G phones who were previously unable to access digital currency.Currently, this feature is only available for Android phone users with NFC functionality, as no details have been given for iOS users or 2G phone owners. This innovation is part of the central bank’s efforts to expand the reach and usage of its digital currency, especially for users with 2G phones who were previously unable to access it.Earlier this year, the PBoC launched a similar solution for smartphone users, using near-field communication (NFC) technology. However, the latest solution relies on hardware embedded in SIM cards, which can act as a “hard” (offline) central bank digital currency (CBDC) wallet.Partnership with telecoms giantsThe central bank’s partners relative to this particular project include major telecom operators China Mobile, China Telecom, and China Unicom, as well as state-owned commercial banks Industrial and Commercial Bank of China and Bank of China, who have also introduced SIM card-based “hard wallet products.” These developments are expected to significantly improve the payment capabilities and network-free functionality of the digital yuan.To use this feature, citizens have to get a “super SIM card” from their carriers. After they have replaced their existing SIM cards and opened the digital yuan app on their phones, they will see an option to “open a SIM card hard wallet.” This will enable them to make touch-based payments to merchants even when their devices are powered off or lack network connectivity.SIM-based wallets are likely to be particularly useful for those using 2G devices or smartphones without NFC capabilities. Considering that about 20% of Chinese mobile users still use 2G phones, it would make sense for the PBoC to continue working in this direction with future updates.Driving adoptionThe ultimate plan of the PBoC regarding SIM-based wallets is not clear yet. However, recent developments, such as the pilot project in Qingdao where CBDC payments were tested on the metro system without electricity or network, indicate a strong push toward increasing the accessibility and adoption of the digital yuan.Frankly, moves to bring about adoption of the e-CNY have been nothing short of relentless. These measures have varied from paying state employees in e-CNY in Changshu, collaborating with French bank BNP Paribas so that its corporate clients start to use the digital yuan and enabling e-CNY bus fare payments on public transport in Jinan.China’s Jiangsu Province has integrated the digital yuan into its education system, while the resort city of Sanya recently introduced e-CNY ATM machines so that foreign tourists have a means through which they can access the digital currency. These developments demonstrate a clear commitment by the Chinese authorities in advancing the rollout of its central bank digital currency.

news
Web3 & Enterprise·

Apr 28, 2023

Amber Group Targets Trust in Web3 Via Thoughtworks Partnership

Amber Group Targets Trust in Web3 Via Thoughtworks PartnershipSingapore-based Amber Group, a leading digital asset service provider in crypto-related infrastructure, products and trading, has announced a partnership with global technology consultancy Thoughtworks.© Pexels/Palu MalerbaAI-led product offeringThe strategic partnership has been formed between the two entities in an effort to develop innovative security solutions that can enhance transparency and trust in Web3. It’s envisaged that in meeting this objective, product development will rely heavily on artificial intelligence-based technology.In a press release on Wednesday, Amber Group’s Head of Web3 Security, Dr. Chiachih Wu, said that the partnership allows the firm to provide its clients with “even more comprehensive and cutting-edge security solutions, such as automated software testing and AI-powered vulnerability detection.”Leveraging software design and security expertiseSong Zhang, Global Service Lines Lead at Thoughtworks believes that in order to advance the development of a next-gen internet, Web3 has to use “sophisticated engineering practices and scientific methods to address crucial issues caused by decentralization.” Zhang cites issues such as compliance, privacy and security. He believes that through the collaboration both firms can contribute to leverage their respective software design and security expertise, and in that way, tackle these challenges.“By using new technology and tools, we aim to create applications and new standards that promote the construction of a healthy, transparent, open, inclusive and responsible Web3 ecosystem,” he stated.Strategic realignmentThis is not the first strategic departure Amber Group has taken recently. Earlier this month the Singapore-based firm was said to be mulling over the sale of its Japanese crypto lending subsidiary. It’s understood that the proposed move would help the company to streamline its operations and focus on its core markets.Launched in 2018 as a joint venture with Japanese financial services conglomerate SBI Group, the Amber Japan crypto lending business had failed to gain traction in a difficult Japanese market.The firm acts as a liquidity provider, miner and validator on over 70 digital asset exchanges, applications and networks. Earlier this year it took the decision to cut headcount, in the process reducing staffing at its Hong Kong office by 40. Last December the firm shuttered WhaleFin, its crypto exchange business.The collapse of crypto exchange FTX in November 2022 had a knock-on effect on some of the firm’s products and customers. 10% of its trading capital was held with FTX when the exchange collapsed. Additionally, a number of the firm’s products would have experienced significant drawdowns without the company taking action. In response, Amber raised $300 million in a Series C funding round to overcome that challenge.Those events are likely to have been key in terms of the company subsequently taking a strategic approach of focusing on core business operations and partnerships like this one that it has just announced with Thoughtworks. Undeterred by the challenges, the company still focuses on becoming a category leader in the industry.

news
Web3 & Enterprise·

Aug 24, 2023

MARBLEX Partners with Aptos to Expand Its Multichain Endeavors

MARBLEX Partners with Aptos to Expand Its Multichain EndeavorsMARBLEX, a blockchain subsidiary of South Korean gaming developer Netmarble, has made an announcement today about its new collaboration with Aptos Foundation, a layer-1 blockchain company.Designed with key principles such as scalability, safety, and upgradeability, the Aptos blockchain aims to address prevalent issues within the blockchain sphere, including frequent outages, high costs, throughput limitations, and security concerns.Photo by Shubham Dhage on UnsplashMARBLEX WARP BridgeThrough the strategic partnership between the two companies, MARBLEX plans to leverage the MARBLEX WARP Bridge, a technology connecting diverse blockchain ecosystems, to introduce the MBX ecosystem’s games, non-fungible tokens (NFTs), and other services to Aptos users.MARBLEX’s multichain collaborationsThis partnership is part of MARBLEX’s effort to expand its multichain endeavors. MARBLEX has already established collaborations with renowned entities such as global cryptocurrency exchange Binance and blockchain project NEAR Foundation.Moon Jun-ki, Business Division Director of MARBLEX, said that this partnership will create synergy, particularly in terms of enhancing scalability and fostering interactions among users of both networks.Bashar Lazaar, Ecosystem and Grants Lead at Aptos Foundation, noted that this collaboration will drive innovation in Web3-based gaming experiences, benefiting global users.

news
Loading