Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Markets·

May 04, 2023

Audius Achieves Token Listing On India’s CoinSwitch

Audius Achieves Token Listing On India’s CoinSwitchAudius, a decentralized music streaming platform which is attempting to cut intermediaries out of the music business, took a major leap forward in the Asian market on Wednesday, scoring a listing of its native $AUDIO token on Indian crypto exchange, CoinSwitch.Photo by Studio Art Smile on PexelsIn announcing the token going live on the platform CoinSwitch encouraged platform users to “trade $AUDIO today and support independent artists worldwide.” Founded in the United States in 2018 by Stanford University graduates Forrest Browning and Roneil Rumberg, the project launched its $AUDIO token in 2020.The token commenced trading on top tier global crypto exchanges shortly afterwards. In terms of listings on Asian exchanges, $AUDIO can be traded on DigitFinex Global, Bitrue and BingX in Singapore, HitBTC and Hotbit in Hong Kong and Tokocrypto and INDODAX in Indonesia. While it is already listed on WazirX, India’s largest crypto exchange by trading volume, the project will welcome another Indian listing via CoinSwitch given a market that ranks sixth in the world in terms of crypto ownership, with a backdrop of a population of 1.4 billion.Web3 with a Web2 UXAudius has taken a different approach than most other crypto projects. From the outset, its founders have focused on giving the platform the look and feel of a Web2 streaming service. Audius decided to embed its non-custodial wallet Hedgehog into the user login process.The strategy has been to make the UX as customer friendly and intuitive as possible in order to aid user on-boarding. There have been trade-offs in taking this approach and with that, the project advises users to keep only a small amount of the $AUDIO token within the Hedgehog wallet. When Hedgehog was launched in 2019, a project blog post proclaimed that “decentralization doesn’t have to come at the expense of user experience.”TikTok integrationEarlier this year, the Web3 streaming service integrated TikTok, allowing platform users to create accounts simply by linking their TikTok profiles. Additionally, the integration meant that users could share their Audius songs in the TikTok videos they produced.In late January, the $AUDIO token jumped 70% in a matter of hours once it became known that Coinbase planned to list the token on January 26. While a CoinSwitch listing is a significant milestone for the project in the Indian market, naturally it doesn’t compare with the volume that a global exchange listing on Coinbase can bring. At the time of publication, the $AUDIO token was trading at $0.29.For its part, CoinSwitch has experienced many of the ups and downs that this nascent industry could possibly deliver. In August 2022, five properties associated with the crypto exchange were searched by India’s Enforcement Directorate on the grounds of suspected contravention of India’s Foreign Exchange Management Act (FEMA).Founded in 2017 by Ashish Singhal, Govind Soni and Vimal Sagar Tiwari, the firm has attracted investment and backing from Andreessen Horowitz, Coinbase Ventures, Tiger Global Management and Paradigm.

news
Policy & Regulation·

Apr 13, 2023

Hong Kong Bank to Act as Settlement Bank for Crypto Firms

Hong Kong Bank to Act as Settlement Bank for Crypto FirmsZA Bank, Hong Kong’s largest virtual bank, is looking to become the go-to bank for crypto startups. The online bank has been given permission to serve as the settlement bank for regulated Web3 companies in the city. This development was announced at Hong Kong’s Web3 Festival, an event supported by the local government and attended by crypto startups and institutions from across Asia.©Pexels/Frank BarningHashKey and OSL collaborationZA Bank is expected to facilitate crypto-fiat conversions with two licensed exchanges in Hong Kong, HashKey and OSL, where customers can swap crypto into fiat currencies. ZA Bank will also offer basic banking services to local Web3 startups, a category that is currently underserved by traditional financial institutions.ZA Bank is focusing on assisting local Web3 startups and small-medium enterprises (SMEs).The bank linked up to the city’s company registry data, allowing for minimal information input and cross-checking. According to Devon Sin, alternate chief executive of ZA Bank, the bank currently conducts AML scrutiny against the usual checklists to satisfy the regulatory requirements. No AML issues have emerged during the recent months of work.Competing for global crypto businessHong Kong is trying to establish itself as a crypto-friendly alternative to other hubs, such as the US and Singapore, and a sandbox for Web3 businesses from China, where crypto trading is illegal. The city is revamping its digital assets regulatory framework, with plans to legalize retail trading of major cryptocurrencies like Bitcoin and Ether. Ronald Lu, CEO of ZA Bank, said that ZA Bank’s online account opening for Web3 startups is a major step forward in integrating traditional banking services with the Web3 world.According to Lu, ZA Bank will act as a settlement bank for clients to allow withdrawals in Hong Kong, China, and US currencies after they deposit crypto tokens with exchanges. The business model is already operational through HashKey and OSL, the only two licensed crypto exchanges in Hong Kong. The bank will provide the same service for other exchanges as they become licensed.HK China’s crypto “trial run”Hong Kong is opening up to the beleaguered sector in a move that aims to revive its status as a financial center following years of COVID restrictions and political upheaval. However, access to banking has been a major hurdle for the city’s ambitions. The city’s banking and securities regulators are hosting a round-table for crypto players and bankers to share experiences and perspectives on banking services later this month.Many have speculated about a softening stance on cryptocurrency by the Chinese authorities. However, it’s more likely that they continue with strict regulation and control relative to crypto in mainland China while happy to monitor a more open approach to it within Hong Kong. Crypto analyst Myles Deutscher likens the approach to a “trial run” that is being monitored by China.Launched in March 2020, ZA Bank is one of Hong Kong’s eight licensed virtual banks and had the most net assets as of last year, despite remaining unprofitable. The virtual lender doesn’t expect it will need to boost its headcount to handle the crypto client push. Although the revenue model is still unclear, Lu said that more clients, more deposits, and more business opportunities are always great for the bank. The lender doesn’t offer services for clients from mainland China, given the restrictions in place there.

news
Web3 & Enterprise·

Aug 12, 2023

Boyaa Interactive Greenlights $5 Million Investment in Bitcoin and Ether

Boyaa Interactive Greenlights $5 Million Investment in Bitcoin and EtherBoyaa Interactive International Limited, a Hong Kong-based investment holding company with a track record in developing online chess, card, and puzzle games, has made a strategic move with a proposed investment in digital assets.The company’s board of directors has recently given the green light for the allocation of a substantial budget amounting to $5 million for the purpose of acquiring cryptocurrencies.Photo by Traxer on UnsplashWeb3 positioningThe Chinese company, incorporated in the Cayman Islands, announced the move as Boyaa Interactive seeks to position itself for a dynamic shift into the realm of Web3.While the exact allocation breakdown was not detailed in the disclosure, the company outlined that its primary focus would be on procuring established cryptocurrencies, specifically Bitcoin (BTC) and Ether (ETH). Boyaa Interactive intends to execute these purchases through regulated and licensed trading platforms within the upcoming year.In a letter addressed to its shareholders and potential investors, the company emphasized the strategic nature of this decision:“The purchases of cryptocurrencies are for the consideration of the Group’s future business layout into the field of Web3. The Board is of the view that the purchases of cryptocurrencies (including mainly Bitcoin (BTC) and Ether (ETH)) by the Group are in the interests of the Company and its shareholders as a whole.”A challenging recent historyThe move towards cryptocurrencies is a significant pivot for Boyaa Interactive, a company that has navigated a series of challenges in recent years. In 2018, the company’s Chairman and CEO, Zhang Wei, faced legal troubles and was sentenced to 12 months in prison for bribery, which led to his resignation from all executive and management positions.Subsequent restructuring saw Dai Zhikang stepping in as the new Chairman of the board, while Tao Ying assumed the role of an Executive Director and Chairman of the Nomination Committee.Financially, Boyaa Interactive experienced a tough period marked by revenue contraction. The company reported revenue declines over the course of 2018, largely attributed to a governmental crackdown on online poker applications and the discontinuation of poker as a recognized competitive sport. Regulatory risks stemming from the Chinese government’s stance on Texas Hold’em poker games resulted in a substantial falloff in revenue by comparison with past performance.Funds seizureThese challenges cascaded into the following year, when the company encountered a substantial freeze on its funds. In 2019, a Chinese court ordered the freezing of RMB 635 million (approximately $88.6 million) belonging to Boyaa Interactive, following the legal actions against Zhang Wei and his associated entities.One of the company’s subsidiaries, Boyaa Shenzhen, was found guilty of offering bribes. The company responded by clarifying that the frozen funds could potentially be confiscated if linked to Zhang’s misconduct. However, Boyaa Interactive also stressed that it had not been directly implicated in the case, thus mitigating the legal risks to the broader organization.Amidst these adversities, Boyaa Interactive’s decision to invest in cryptocurrencies demonstrates its openness to adapting to changing technological landscapes and exploring new opportunities in Web3.

news
Loading