HTX experiences $258 million outflow post-hack

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies. Huoine PayOn July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. Photo by allPhoto Bangkok on Unsplash‘Pig butchering’It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.”  Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.” The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet. The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform. Compromising crypto businessesIn a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications. A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware.  Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

Bitget Launches $100M Crypto Ecosystem FundSeychelles-based crypto exchange Bitget has launched its EmpowerX Fund, a $100 million initiative unveiled during Bitget’s fifth-anniversary summit in Singapore on Tuesday.Photo by micheile henderson on UnsplashStrategic investmentThe firm expanded on the finer details of the fund at the summit event and also by way of a press release published to PR Newswire. The primary goal of the initiative is to enrich the platform’s ecosystem by strategically investing in various sectors, including regional exchanges, data analytics firms, and media organizations.Bitget’s approach via this new fund is grounded in diversification to meet the ever-evolving needs of its 20 million global customers. The exchange envisions creating a comprehensive trading ecosystem that encompasses trading, investment, research, DeFi, and media.Gracy Chen, the Managing Director of Bitget, emphasized that the cryptocurrency exchange sector is in a constant state of evolution and with that, the firm has a forward-looking vision that extends beyond the present. Chen stated:“The CEX landscape is continually evolving amid influences of tightened regulations, rapid growth of Layer 2 and DeFi technologies, and we are expecting that more investment, meager [sic] and acquisition will happen in the following months. Our vision goes beyond the present.”She added: “With the launch of the Bitget EmpowerX Fund, we take another major step in our mission to develop Bitget into a truly comprehensive platform for all needs. Through strategic, targeted investments that foster long-term growth, we aim to continually expand our ecosystem of services to better serve the evolving needs of users. We also want to empower other people in our industry, because a rising tide lifts all boats.”Broader investment trendBitget’s EmpowerX Fund is part of a broader trend of strategic investments and expansion. In April, the exchange introduced the $100 million Web3 Fund, which focuses on supporting projects based in Asia and partnering with global venture capital firms, including Foresight Ventures, SevenX Ventures, and Gitcoin Fund.As part of that initiative, the firm invested $20 million in Sei Labs, the developers of the layer one Sei blockchain. The strategic direction being taken by Bitget extends beyond digital assets, as Bitget allocated $30 million to invest in the BitKeep multi-chain wallet, which subsequently underwent a rebranding as Bitget Wallet. This investment marked a significant milestone in Bitget’s journey toward embracing decentralized strategies.Diversifying service offeringTo better cater to the evolving needs of its users, Bitget has diversified its service offerings. In addition to traditional trading, the platform has ventured into the realm of crypto loans, a bold move given the difficulties experienced in 2022 by crypto lending firms like Celsius, BlockFi, Hodlnaut, Vauld, and Voyager Digital, who all ended up in bankruptcy.The company has taken a further step towards diversification on Tuesday, announcing the launch of its Bitget Wealth Management product. The firm claims that the product is targeted to meet the needs of high-net-worth individuals and institutions, offering to assist them in optimizing their financial portfolios.Bitget has also adapted to a changing regulatory landscape recently, stepping up its compliance in terms of Know Your Customer (KYC) measures.

BitGo CEO Emphasizes Separation of Trading and Custody to Prevent Crypto BankruptciesMike Belshe, Founder and CEO of digital asset trust company BitGo, emphasized the importance of separating cryptocurrency trading and custody to prevent incidents similar to those involving Mt. Gox and FTX in his keynote speech at Impact, the main conference of Korea Blockchain Week (KBW) 2023.Established in 2013, BitGo is currently the world’s largest provider of virtual asset custody services, serving more than 1,500 institutions in over 50 countries, including the US, Switzerland, and Germany. Major exchanges like Bitstamp, Korbit, Bullish, Gate.io, and Crypto.com entrust BitGo with safeguarding their virtual assets.Clear divisionDuring his speech, Belshe repeatedly stressed the need for custody services for the sustainability of the virtual asset ecosystem, asserting that separating trading and custody can enhance trust in the industry and attract traditional financial institutions.Unlike stock markets, where payment institutions and custodians are separate entities, this kind of separation does not exist in the virtual asset market. To steer traditional financial institutions toward the virtual asset ecosystem, this issue needs to be addressed, Belshe said.He went on to cite the Mt. Gox hack in 2014 and the FTX collapse last year as examples that underscored the importance of virtual asset custody. Mt. Gox, once the world’s largest Bitcoin exchange, reportedly lost some 650,000 to 850,000 Bitcoins — worth more than $450 million at the time — due to a hacking incident, leading to its bankruptcy. FTX also faced insolvency after it was revealed that it inflated its assets using its native token FTT and that its management was misusing customer investment funds.Photo by Melinda Gimpel on UnsplashBelshe suggested that when Mt. Gox employees discovered the Bitcoin theft during the hack, it was already too late. If custody had been treated separately, the theft could have been detected much faster. Regarding the FTX debacle, he argued that even with just a few auditors, the problems in that situation could have been apprehended. FTX’s ability to provide custody of customer assets themselves led to unauthorized activities, including cross trading and insider trading, ultimately resulting in the misuse of customer funds.Korea’s favorable conditionsBelshe also assessed that South Korea is well-positioned for the establishment of virtual asset custody systems due to its high trading volume and a solid commitment to drafting crypto-related legislation. Seven such bills are currently underway, reflecting the authorities’ determination to address problems in the ecosystem. Korea thus has the potential to establish itself as a hub in Asia, he said.Indeed, BitGo’s partnership with Hana Bank to establish a joint venture for digital asset custody services in Korea is driven by these factors. Through its entry into Korea, BitGo aims to share its extensive knowledge and experience in digital asset business institutionalization and investor protection. It will also apply the expertise and strategies it has accumulated through close communication with regulatory authorities and supervisory agencies in various countries, including the US, to support the integration of virtual assets into the regulated framework in Korea.Belshe commented that through this partnership, BitGo will seek to enhance its understanding of Korea and utilize its technology and expertise to boost confidence in the Korean cryptocurrency market.