South Korea’s GDAC Suffers $13M hack
South Korean cryptocurrency exchange, GDAC, has suffered a significant hacking incident that has resulted in the loss of approximately 23% of its custodial digital assets.
The hack occurred on Sunday when some of the exchange’s hot wallets were breached, and the stolen assets were transferred to an unidentified wallet. GDAC reported the incident on Monday and disclosed that the exchange lost over $13.1 million in Bitcoin, Ether, Wemix, and USDT, with more than $10 million in Wemix.
According to blockchain analytics firm Arkham Intelligence, the hacker has since swapped the USDT for ETH, sending 461 ETH to cryptocurrency tumbler, Tornado Cash. The hacker used three separate wallets to take funds from two of the exchange’s hot wallets. Arkham has labeled the wallets as follows:
GDAC Hacker 1: 0x244615D99684175d31369332039b2D84ce925EC5GDAC Hacker 2: 0x62B5eb2cb925Ce2898f9327B235b3228e7Cac1C2GDAC Hacker 3: 0x87597bDB421482190e223aCa0A4DEAd75AB0a98D
GDAC deposits/withdrawals suspended
GDAC has suspended its withdrawal and deposit services and reported the incident to the Korea Internet and Security Agency and the Financial Intelligence Unit. The exchange has also requested other cryptocurrency exchanges to block incoming transactions from suspicious addresses.
In a notice posted on its website, GDAC CEO Seunghwan Han apologized for the suspension of deposits/withdrawals and concern relative to the hack, adding that the firm will be working towards investor protection and safe withdrawal of funds in due course. GDAC also posted the breakdown of the digital asset quantities lost in the hack, with the hacker stealing 60.80 BTC, 350.5 ETH, 10,000 WEMIX and 220,000 USDT.
Crypto hacks increasing
This hacking incident comes at a time when cryptocurrency hacks have been on the rise. According to blockchain analytics firm Chainalysis, illicit actors stole $3.8 billion worth of assets last year, the largest one-year loss in crypto’s history. In addition, other crypto platforms have also suffered notable hacks and exploits in the past 15 to 18 months. Axie Infinity’s Ronin bridge, for example, suffered a $625 million hack last year, and decentralized-finance protocol Sushi was exploited for $3.3 million on Sunday.
GDAC is not the only South Korean cryptocurrency exchange to suffer a significant hacking incident. In 2018, Coinrail was hacked, resulting in the loss of approximately $40 million worth of assets, and in 2021, Upbit suffered a $50 million hack.
In response to these incidents, South Korea has taken steps to tighten regulations around cryptocurrency exchanges. In March 2021, the country’s Financial Services Commission issued a revised regulation that requires cryptocurrency exchanges to maintain stricter anti-money laundering measures and report suspicious transactions.
The GDAC hack is a stark reminder of the risks associated with cryptocurrency investing and the importance of implementing robust security measures. Investors and cryptocurrency exchanges should take note of this incident and ensure that they have adequate security measures in place to protect against potential hacks and exploits.
