Top

HTX and Heco Chain exploited with $115 million loss

Policy & Regulation·November 24, 2023, 2:14 AM

Seychelles-incorporated cryptocurrency exchange HTX, linked to digital-asset entrepreneur Justin Sun, has fallen victim to a significant hack, only a few months after having suffered another hack in September.

Photo by Markus Spiske on Unsplash

 

Second HTX hack in recent months

The last hack, involving a loss of digital assets to the value of $8 million, was resolved when the hacker agreed to return funds in October in return for a goodwill payment of around $400,000.

This latest unfortunate incident follows another hack on Poloniex, also associated with Sun, just weeks ago. Sun acknowledged the HTX hack in a tweet, announcing the temporary suspension of deposits and withdrawals without specifying the exact amount pilfered.

 

Separate Heco Chain hack

It is understood that approximately $30 million worth of cryptocurrencies was siphoned from the exchange wallet. The platform is actively investigating the breach, aiming to uncover the specifics surrounding the attack. Simultaneously, the HECO Bridge, which was established by HTX for cost-effective fund transfers across different blockchains, experienced a separate hack.

This breach resulted in losses exceeding $85 million, including ETH, US dollar stablecoin Tether (USDT) and various other tokens. Although initially launched by HTX, HECO operates independently from the HTX exchange.

 

Crypto community concern

These security breaches cast a shadow over Sun’s crypto ventures, especially considering the recent hack on Poloniex, which saw losses surpassing $100 million in various cryptocurrencies. A spokesperson for crypto security firm Hacken told Cointelegraph that these hacks could be the work of an insider.

“We can see that all these attacks have the same target: Justin Sun’s projects,” the spokesperson stated. These related incidents are the cause of significant speculation within the crypto space, with some concern expressed about the financial health of HTX, given that the firm is currently offering unsustainable interest rates of up to 100% APY on a selection of digital assets.

In response to the HTX hack, Justin Sun assured the community in a post on X (formerly Twitter) that HTX would fully compensate for the losses incurred in its hot wallet. The exchange has temporarily halted deposits and withdrawals as the investigation unfolds. Sun emphasized the commitment to resume services once the investigation concludes and the cause of the breach is identified.

These incidents raise questions about the security infrastructure of platforms associated with Justin Sun. The crypto community awaits further details on the investigation’s outcomes and preventive measures that will be implemented to fortify these exchanges against future attacks.

Such recent security breaches have not just affected Justin Sun-related enterprises. Earlier this month, decentralized exchange (DEX) KyberSwap was exploited to the tune of $46.5 million. Earlier this week, Kronos Research — a Taipei-based crypto trading, market making and venture capital platform — experienced a $25.6 million loss. The past twenty days have seen five major hacks resulting in an aggregate loss of a staggering $290 million.

As the crypto industry grapples with increasing security challenges, the importance of robust protective measures cannot be overstated. These developments underscore the need for a cautious and diligent approach in safeguarding digital assets within the rapidly evolving cryptocurrency landscape.

More to Read
View All
Policy & Regulation·

Aug 04, 2025

Hong Kong taxis likely test case for stablecoin payments

With the Chinese autonomous territory of Hong Kong having introduced its new Stablecoins Ordinance on August 1 and local taxi operators required to facilitate two forms of digital payment from April 1, 2026, a case is being made that this eventuality lends itself to an ideal test case for stablecoin payments.Photo by The Transport Enthusiast DC on UnsplashA perfect test caseIn an opinion piece published by Bloomberg on Aug. 3, columnist Andy Mukherjee asserted that Hong Kong taxis would be “a perfect stablecoin test case,” suggesting that the timing is ideal for stablecoins, given that a new licensing regime has come into effect via the city’s Stablecoins Ordinance.  In an interview, Franz Bergmueller, CEO of Switzerland-headquartered crypto bank AMINA Bank, said that “stablecoins for me are a killer use case.” On social media, AMINA Bank claimed that it would be “a major step in the right direction” if Hong Kong taxis start to accept stablecoin payments from customers. It emerged last December that the city’s taxi drivers would be required to install both electronic payment facilities and navigation systems, based on a filing made to Hong Kong’s Legislative Council. The filing outlined that while some taxi drivers currently offer electronic payment options, many insist on cash payment. The city’s Transport and Logistics Bureau suggested that “drivers offer at least two electronic payment options, including both QR code and non-QR code methods.” Stablecoin payments overseasThere has been some limited use of stablecoins as a payment method by taxi services in places with unstable currencies such as Argentina and Venezuela. The world’s most popular ride-hailing service, Uber, is understood to be studying the feasibility of offering stablecoin-based payments. In 2024, Asian rival Grab commenced accepting crypto, including the USDT and USDC stablecoins, as a means of payment for ride-sharing and food delivery services in Singapore. Last month, it extended that facility to its platform users in the Philippines.In June it emerged that Tawasul Transport, a taxi service in Abu Dhabi in the United Arab Emirates (UAE), had partnered with Al Maryah Community Bank (Mbank) and Abu Dhabi’s Department of Municipalities and Transport to launch a pilot program implicating the use of AE Coin, a UAE dirham-pegged stablecoin, as a means of payment. Bloomberg’s Mukherjee suggests that for entities now applying for stablecoin licensing, this new digital payment requirement for Hong Kong’s taxi services could provide an immediate segue to onboard users and make a new stablecoin product popular. Mukherjee places specific emphasis in this regard on what actions Ant Group may take. It emerged recently that Ant Group, an affiliate of the Alibaba Group, intends to apply for stablecoin licensing across Asian markets, including Hong Kong. The company is already a leader in Asia in digital payments through Alipay, which serves 1.3 billion users.Although Ant Group is based in mainland China, Hong Kong would offer the company the opportunity to test the establishment of a stablecoin for retail payments.

news
Web3 & Enterprise·

Apr 12, 2023

South Korea’s GDAC Suffers $13M hack

South Korea’s GDAC Suffers $13M hackSouth Korean cryptocurrency exchange, GDAC, has suffered a significant hacking incident that has resulted in the loss of approximately 23% of its custodial digital assets.©Pexels/PixabayThe hack occurred on Sunday when some of the exchange’s hot wallets were breached, and the stolen assets were transferred to an unidentified wallet. GDAC reported the incident on Monday and disclosed that the exchange lost over $13.1 million in Bitcoin, Ether, Wemix, and USDT, with more than $10 million in Wemix.According to blockchain analytics firm Arkham Intelligence, the hacker has since swapped the USDT for ETH, sending 461 ETH to cryptocurrency tumbler, Tornado Cash. The hacker used three separate wallets to take funds from two of the exchange’s hot wallets. Arkham has labeled the wallets as follows:GDAC Hacker 1: 0x244615D99684175d31369332039b2D84ce925EC5GDAC Hacker 2: 0x62B5eb2cb925Ce2898f9327B235b3228e7Cac1C2GDAC Hacker 3: 0x87597bDB421482190e223aCa0A4DEAd75AB0a98DGDAC deposits/withdrawals suspendedGDAC has suspended its withdrawal and deposit services and reported the incident to the Korea Internet and Security Agency and the Financial Intelligence Unit. The exchange has also requested other cryptocurrency exchanges to block incoming transactions from suspicious addresses.In a notice posted on its website, GDAC CEO Seunghwan Han apologized for the suspension of deposits/withdrawals and concern relative to the hack, adding that the firm will be working towards investor protection and safe withdrawal of funds in due course. GDAC also posted the breakdown of the digital asset quantities lost in the hack, with the hacker stealing 60.80 BTC, 350.5 ETH, 10,000 WEMIX and 220,000 USDT.Crypto hacks increasingThis hacking incident comes at a time when cryptocurrency hacks have been on the rise. According to blockchain analytics firm Chainalysis, illicit actors stole $3.8 billion worth of assets last year, the largest one-year loss in crypto’s history. In addition, other crypto platforms have also suffered notable hacks and exploits in the past 15 to 18 months. Axie Infinity’s Ronin bridge, for example, suffered a $625 million hack last year, and decentralized-finance protocol Sushi was exploited for $3.3 million on Sunday.GDAC is not the only South Korean cryptocurrency exchange to suffer a significant hacking incident. In 2018, Coinrail was hacked, resulting in the loss of approximately $40 million worth of assets, and in 2021, Upbit suffered a $50 million hack.In response to these incidents, South Korea has taken steps to tighten regulations around cryptocurrency exchanges. In March 2021, the country’s Financial Services Commission issued a revised regulation that requires cryptocurrency exchanges to maintain stricter anti-money laundering measures and report suspicious transactions.The GDAC hack is a stark reminder of the risks associated with cryptocurrency investing and the importance of implementing robust security measures. Investors and cryptocurrency exchanges should take note of this incident and ensure that they have adequate security measures in place to protect against potential hacks and exploits.

news
Policy & Regulation·

Jun 27, 2023

South Korea Launches Blockchain Project to Streamline Public Services

South Korea Launches Blockchain Project to Streamline Public ServicesThe South Korean Ministry of Science and ICT and the Korea Internet and Security Agency (KISA) have launched the 2023 blockchain application project to bolster the domestic industry and adapt to the rapidly evolving global blockchain landscape.Photo by Ping Onganankun on Unsplash$1.6 million projectAs part of the Korean government’s broader strategy to promote the blockchain industry, the project has received a budget of approximately 20.7 billion KRW ($1.6 million). The project participants are focused on exploring blockchain-based services that offer convenience to the public and have the potential to penetrate the global market. The digitization of drivers’ licenses is such a service that has been developed and has simplified the lives of Korean citizens.The project encompasses both the public and private sectors, each undertaking six programs. The public sector programs aim to explore blockchain-based services that the government can provide, while the private sector programs are dedicated to supporting the commercialization of business prototypes developed by companies.Public sector programsThe six public sector programs are the implementation of digital badges for national licenses, the development of an online voting system for residents, the establishment of a remote pension eligibility check system, the enhancement of the electronic authentication system, the streamlining of drone operation applications, and the creation of a performance tracking platform for athletes.For instance, the implementation of digital badges for national licenses will greatly streamline the process for individuals who need to present their licenses to relevant organizations as a means of verifying their credentials. Presently, license holders are required to physically visit issuers or navigate their websites to gather the necessary documentation. However, the introduction of this new technology eliminates the need for this cumbersome process.Private sector programsMeanwhile, the private sector programs focus on developing the following six platforms: the battery life authentication system for electric vehicles (EVs), the oil waste trading platform, the non-fungible token (NFT) issuer for digital identity authentication, the NFT concert ticket system, the fractional investment platform for power plants, and the corporate management planner for environmental, social, and governance (ESG) initiatives.For example, the introduction of a blockchain-based certificate system to assess the remaining life of EV batteries holds significant implications for both car insurance and the trading of used cars. Currently, the lack of comprehensive data to evaluate the exact value of EV batteries poses challenges to the efficient trade of both used cars and batteries. Establishing this certificate platform will not only promote battery recycling but also positively impact the industry as a whole.

news
Loading