Top

HTX and Heco Chain exploited with $115 million loss

Policy & Regulation·November 24, 2023, 2:14 AM

Seychelles-incorporated cryptocurrency exchange HTX, linked to digital-asset entrepreneur Justin Sun, has fallen victim to a significant hack, only a few months after having suffered another hack in September.

Photo by Markus Spiske on Unsplash

 

Second HTX hack in recent months

The last hack, involving a loss of digital assets to the value of $8 million, was resolved when the hacker agreed to return funds in October in return for a goodwill payment of around $400,000.

This latest unfortunate incident follows another hack on Poloniex, also associated with Sun, just weeks ago. Sun acknowledged the HTX hack in a tweet, announcing the temporary suspension of deposits and withdrawals without specifying the exact amount pilfered.

 

Separate Heco Chain hack

It is understood that approximately $30 million worth of cryptocurrencies was siphoned from the exchange wallet. The platform is actively investigating the breach, aiming to uncover the specifics surrounding the attack. Simultaneously, the HECO Bridge, which was established by HTX for cost-effective fund transfers across different blockchains, experienced a separate hack.

This breach resulted in losses exceeding $85 million, including ETH, US dollar stablecoin Tether (USDT) and various other tokens. Although initially launched by HTX, HECO operates independently from the HTX exchange.

 

Crypto community concern

These security breaches cast a shadow over Sun’s crypto ventures, especially considering the recent hack on Poloniex, which saw losses surpassing $100 million in various cryptocurrencies. A spokesperson for crypto security firm Hacken told Cointelegraph that these hacks could be the work of an insider.

“We can see that all these attacks have the same target: Justin Sun’s projects,” the spokesperson stated. These related incidents are the cause of significant speculation within the crypto space, with some concern expressed about the financial health of HTX, given that the firm is currently offering unsustainable interest rates of up to 100% APY on a selection of digital assets.

In response to the HTX hack, Justin Sun assured the community in a post on X (formerly Twitter) that HTX would fully compensate for the losses incurred in its hot wallet. The exchange has temporarily halted deposits and withdrawals as the investigation unfolds. Sun emphasized the commitment to resume services once the investigation concludes and the cause of the breach is identified.

These incidents raise questions about the security infrastructure of platforms associated with Justin Sun. The crypto community awaits further details on the investigation’s outcomes and preventive measures that will be implemented to fortify these exchanges against future attacks.

Such recent security breaches have not just affected Justin Sun-related enterprises. Earlier this month, decentralized exchange (DEX) KyberSwap was exploited to the tune of $46.5 million. Earlier this week, Kronos Research — a Taipei-based crypto trading, market making and venture capital platform — experienced a $25.6 million loss. The past twenty days have seen five major hacks resulting in an aggregate loss of a staggering $290 million.

As the crypto industry grapples with increasing security challenges, the importance of robust protective measures cannot be overstated. These developments underscore the need for a cautious and diligent approach in safeguarding digital assets within the rapidly evolving cryptocurrency landscape.

More to Read
View All
Policy & Regulation·

Nov 25, 2025

Regulators clamp down on crypto energy as nations shift priorities

The blockchain network underpinning Bitcoin, the world’s largest cryptocurrency, requires an energy volume comparable to the annual consumption of Thailand. According to Digiconomist’s Bitcoin Energy Consumption Index, the protocol utilized roughly 204.44 terawatt-hours (TWh) of electricity between Nov. 18, 2024, and Nov. 18, 2025.Photo by Fré Sonneveld on UnsplashFiscal losses drive Malaysian oversightAmid these intense energy demands, Malaysia’s primary electricity utility has recorded substantial financial impairments attributed to illicit activities. Tenaga Nasional Bhd (TNB) reported losses totaling 4.57 billion ringgit ($1.1 billion) from illegal crypto-mining operations over a five-year span. In a Nov. 19 report by The Edge Malaysia, the Ministry of Energy Transition and Water Transformation (Petra) disclosed these figures to parliament, specifying that the unauthorized mining occurred at 13,827 locations between 2020 and August of this year. To counter these infractions through regulatory channels, Petra has formed a special committee scheduled to convene before year-end. This body aims to recommend enhancements to the Electricity Supply Act, which currently delineates penalties based on the offender's classification. Domestic violators face fines ranging from 1,000 to 50,000 ringgit ($240 to $12,000), imprisonment of up to one year, or both. Penalties escalate for non-domestic entities, involving fines between 20,000 and one million ringgit ($480 to $240,000) and potential prison terms of up to five years. Despite these provisions regarding electricity theft, a specific legal code regulating the act of crypto mining remains absent, creating a jurisdictional void. International bans and grid reallocationStrategies to curtail electricity usage by crypto miners are becoming evident elsewhere in Southeast Asia as well. Laotian Deputy Energy Minister Chanthaboun Soukaloun told Reuters last month that the nation intends to suspend electricity supplies to crypto miners by early 2026. He cited the sector's minimal economic contribution and low job creation as primary factors. Consequently, the state plans to redirect power to high-priority sectors, including AI data centers, metals processing, and electric-vehicle manufacturing. Parallel restrictions are emerging globally. In October, the government of British Columbia enacted a permanent prohibition on new BC Hydro connections for crypto miners to safeguard the Canadian province’s energy reserves. Officials pointed to the industry’s "disproportionate energy consumption and limited economic benefit" as the rationale for the policy. The debate over thermal innovationConversely, some enterprises are exploring methods to capture thermal output from Bitcoin mining to heat residential and commercial properties. If viable, such repurposing could utilize the considerable thermal byproducts of mining. A K33 Research study cited by CNBC indicates the industry generates roughly 100 TWh of heat annually, a figure sufficient to warm the entirety of Finland. However, industry consensus on the feasibility of these applications remains elusive. Proponents suggest that mining infrastructure could be situated in proximity to heat consumers. Skeptics, however, contend that the reliance on application-specific integrated circuit (ASIC) chips makes this impractical, arguing that the technical difficulty of mining a block renders household participation unfeasible. Despite these differing views, the concept continues to attract attention as a potential avenue for innovation in energy distribution. As jurisdictions like Malaysia and British Columbia tighten regulatory oversight, the cryptocurrency sector faces mounting pressure to address its energy footprint. The divergence between government restrictions and industry-led efficiency proposals underscores the complex relationship between digital asset infrastructure and global energy resources. Given the shifting landscape of policy and technology, the outlook for sustainable large-scale crypto mining remains uncertain, as governments weigh energy demands against economic benefits and the industry searches for more efficient ways to operate.

news
Policy & Regulation·

Aug 09, 2023

Korean Financial Authority Grants This Year’s First VASP Approval to Infinite Block

Korean Financial Authority Grants This Year’s First VASP Approval to Infinite BlockThe Financial Intelligence Unit (FIU), a division operating under the South Korean Financial Services Commission (FSC), has recently granted approval to Infinite Block, a blockchain fintech company, to function as a virtual asset service provider (VASP), as reported by the local news outlet Business Watch.37 registered VASPs in KoreaInfinite Block is the first entity to secure such approval from the national financial regulatory authority this year. This development takes the roster of registered VASPs in Korea to a total of 37.When submitting its application in May, Infinite Block declared that its business is tailored for transferring, storing, and managing virtual assets. Its core operational domain centers around virtual asset custody services.Custodian service for institutional investorsFounded last year by Jung Gu-tae, who previously served as a banker at NongHyup Bank and held a C-level position at digital asset custodian Cardo, Infinite Block leverages his extensive experience in banking and virtual assets. Building on this industry insight, Infinite Block is about to introduce Karbon Custody, a specialized service targeting institutional investors.Furthermore, Infinite Block raised about 2 billion KRW ($1.5 million) last year from renowned financial institutions including Daegu Bank, SK Securities, and Infobank. However, the company did incur an operating loss exceeding 200 million KRW due to its nascent stage and the absence of revenue streams.This accomplishment of Infinite Block is noteworthy in light of the decline observed in new VASP filings. While 2021 saw approximately 30 companies applying for VASP approval, the numbers dwindled to merely two new applications last year, followed by only one so far this year.

news
Policy & Regulation·

Aug 26, 2023

Hong Kong Regulator Explores Tokenization to Transform Bond Market

Hong Kong Regulator Explores Tokenization to Transform Bond MarketThe Hong Kong Monetary Authority (HKMA), the local regulator within the Chinese autonomous territory, unveiled the outcomes of its Project Evergreen study on Friday. Within the report, it indicated an interest in harnessing tokenization in order to improve aspects of the bond market.Photo by Jimmy Chan on PexelsBond market impact assessmentIn this comprehensive report, the regulator delved into the intricate world of bond tokenization, offering an in-depth assessment of its potential impact on the market. The 24-page report covers a range of insights, spanning use cases and benefits to the challenges encountered during the study. The overarching sentiment emerging from the study paints tokenization as a compelling avenue for enhancing the bond market’s functionality.Eddie Yue, the Chief Executive of HKMA, emphasized that the study underscored the latent potential of integrating distributed ledger technology (DLT) into real capital market transactions, all within the framework of Hong Kong’s existing legal structure. In addition, the research revealed the prospect of DLT elevating efficiency, transparency, and liquidity within bond markets.Highlighting efficienciesThe report highlighted that the digital nature of tokenized bonds has the power to render paper certificates obsolete, ushering in an era of streamlined processes and diminished errors. Moreover, the study emphasized the capacity for various stakeholders to seamlessly interact via a shared DLT platform, fostering an environment of collaboration. Real-time data synchronization would ensure heightened transparency, a crucial factor in modern financial markets.Furthermore, the report identifies that a standout feature of tokenization lies in atomic delivery versus payment (DvP) settlements for bond transfers. This innovation serves to significantly expedite the settlement process while bolstering the case for end-to-end DLT adoption.That said, the report acknowledges the nascent state of bond tokenization. Yue emphasized that a plethora of challenges must be overcome before mass adoption becomes viable. The HKMA official underscored the necessity for regulatory frameworks to evolve alongside technology adoption.These insights arrive at a time when Hong Kong is carving its niche as a haven for crypto and decentralized finance endeavors. A multitude of enterprises are believed to be queuing up for a coveted Hong Kong crypto license, underscoring the city’s rising stature in the digital finance sphere.July saw Hong Kong’s announcement of a partnership with Saudi Arabia, focusing on tokenization and payments. Additionally, the HKMA is actively exploring the establishment of a regulatory framework for the digital Hong Kong dollar and stablecoins, heralding a commitment to the distributed ledger technology (DLT) application. An imminent seminar with industry stakeholders is planned, aimed at introducing DLT technology and fostering its adoption.Arthur Chan, HKMA Assistant Chief Executive, anticipates wider DLT integration, envisioning reduced settlement times for bond issuances and instantaneous settlement through tokenized cash and smart contracts. He acknowledges the evolving nature of DLT platforms, acknowledging the need for further research and development. However, Chan envisions a future where tokenization extends beyond bonds, potentially encompassing securities, real estate, and mortgage products.

news
Loading