Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Web3 & Enterprise·

Jul 29, 2023

Checkout.com Partnership Sees Alchemy Pay Extend Global Reach

Checkout.com Partnership Sees Alchemy Pay Extend Global ReachAlchemy Pay, a leading Singapore-headquartered fiat-crypto payment gateway, has announced a major collaboration with Checkout.com, a renowned payment processor serving global digital businesses.The partnership, announced by Alchemy Pay via a blog article published on Friday, allows the firm to seamlessly integrate Checkout.com’s Visa and Mastercard channels into its on and off-ramps, enabling effortless transactions between fiat currency and cryptocurrency worldwide. Furthermore, Alchemy Pay’s NFT Checkout product is also set to incorporate these channels in the near future, expanding the reach of the payment gateway even further.Photo by Jonas Leupe on UnsplashVisa and Mastercard integrationThe company claims that the integration of Visa and Mastercard payment rails via Checkout.com enables it to achieve one of the highest payment acceptance rates in the industry. This seamless integration allows users to easily buy and sell digital assets through Visa and Mastercard using the Alchemy Pay Ramp and NFT Checkout.Checkout.com is a leading global payments solution provider catering specifically to large global enterprise merchants, handling massive transaction volumes daily. In 2021 alone, the company processed hundreds of billions of dollars in payments. Its esteemed clientele includes major names such as Netflix, Farfetch, Grab, Sony, Pizza Hut, and Shein.As a premier payment processor, Checkout.com further strengthens its position by providing crucial support to prominent players in the crypto industry, including Circle and Kucoin, among others. The company’s offerings include higher global acceptance rates, enhanced conversion rates, reduced charge-backs, and comprehensive global coverage through a streamlined entry point.Bridging crypto and fiat economiesBy eliminating obstacles to widespread crypto and NFT service adoption, Checkout.com’s smooth conversion process aligns perfectly with Alchemy Pay’s mission of bridging the gap between fiat and crypto economies on a global scale.Digital assets don’t exist in a vacuum. The history of this new asset class is short, having emerged within a world where we have all engaged with a conventional finance system which continues to hold most of the wealth that exists. It’s vital therefore, that services like Alchemy’s broaden the ability to on and off ramp between crypto and fiat if we are to encourage ever greater participation in the crypto economy.Alchemy Pay has been actively pursuing collaborations with renowned global acquirers and payment processors to streamline its on and off-ramp processes. In April the company announced a collaboration that would see it enable domestic transfer payments in India via India’s Unified Payments Interface (UPI) system to effect crypto purchases. Earlier that month, it secured $10 million in funding from market maker DWF Labs, with the funding earmarked towards expanding the business within the South Korean market.Leveraging its payment channels, Alchemy Pay has successfully connected to key markets worldwide, enhancing its capabilities in global coverage and licensing, while also reducing transaction and operating costs.In addition to strategic partnerships, Alchemy Pay has an impressive track record of securing licenses in various countries and regions, including the United States, Canada, Indonesia, and Lithuania.

news
Web3 & Enterprise·

May 27, 2025

Chinese food company adds Bitcoin to balance sheet

DDC Enterprise, a Chinese company headquartered in Hong Kong and listed on the New York Stock Exchange (NYSE), has become the latest corporation to add Bitcoin (BTC) to its balance sheet.Photo by Michael Förtsch on UnsplashInitial 21 BTC purchaseThe plant-based food products company which operates under the “DayDayCook” brand published a press release via Business Wire last Friday announcing its first Bitcoin purchase. It’s likely that there was a symbolic element to the firm’s first Bitcoin purchase, given that it bought 21 BTC while Bitcoin has a supply cap of 21 million BTC. The company completed the transaction via share exchange with an investor group, issuing 254,333 class A ordinary shares while acquiring the 21 BTC at a market price of $2,283,667. DDC outlined that it plans to make two further purchases over the coming days of 79 BTC, at which point the firm’s corporate treasury will hold 100 BTC. Targeting 5,000 BTCThe company has a much more ambitious Bitcoin accumulation plan, however. Over the course of the next three years, it is targeting the establishment of a Bitcoin treasury holding 5,000 BTC. At current market pricing, that would amount to a Bitcoin treasury of around half a billion dollars in value. In the near term, the firm is targeting the acquisition of 500 BTC by the end of this year. DDC Founder and CEO Norma Chu described the development as a “pivotal moment” in the company’s evolution. She said that this plan reflects DDC’s “confidence in Bitcoin as a store of value,” while demonstrating the firm’s interest in pursuing innovation. “We are fully committed to ensuring the success of this strategy, which aligns with our vision to drive long-term value for our shareholders,” she added. Web3 innovationAccording to a DDC website, the company has innovative plans that go beyond just a Bitcoin treasury. It plans to deepen community engagement through the use of NFT loyalty programs and immersive Web3 experiences. It also plans to leverage blockchain transparency in its efforts to build greater community engagement. The website sets out a vision whereby DDC can blend its culinary heritage with next-generation technologies.  The company suggests that real-world asset (RWA) tokenization has the potential to revolutionize consumer engagement, while offering the possibility of enabling fractional ownership of product lines. It has set out a roadmap where it outlines having established a digital platform in 2012, going on to engage in content creation and content commerce over the course of a decade.  The firm carried out an initial public offering (IPO) in 2023 and from 2025 onwards, aside from its Bitcoin treasury strategy, it plans to integrate RWA tokenization and Web3 technology into its business, while also adopting AI technologies to enhance supply chain efficiency. DDC is one of a growing list of corporations to adopt Bitcoin as a strategic asset over the course of the past 18 months. Earlier this month, another Chinese company, Nasdaq-listed Jiuzi Holdings, an electric vehicle (EV) retailer, announced that it had adopted a plan to acquire 1,000 BTC. Hong Kong-listed game developer Boyaa Interactive holds 3,350 BTC.

news
Policy & Regulation·

May 23, 2023

South Korea: Crypto Exchange Execs Indicted on Manipulation Charges

South Korea: Crypto Exchange Execs Indicted on Manipulation ChargesA number of executives at Coinone, one of South Korea’s leading cryptocurrency exchanges, have been indicted on charges related to market manipulation.That’s according to a report published by South Korean news outlet, The JoongAng, on Monday. The complaint details no less than forty-six coins that are alleged to have been the subject of manipulation in some form. That represents one in four of the total number of coins that the exchange has enabled for trading on the platform.Photo by Burak The Weekender on PexelsFour executives indictedThe indictment lists four Coinone executives, Mr. Jeon, Mr. Kim, Mr. Ko, and Mr. Hwang. The four have been charged with employing illegal mechanisms to manipulate coin listings, resulting in the four executives profiting to the tune of 2.98 billion Korean Won, which amounts to $2.26 million dollars according to current fx exchange rates.The complaint specifies that these offenses were committed between December 2019 and November 2022. South Korean prosecutors further allege that prior to various projects obtaining a token listing on Coinone, company executives made them sign third-party market-making contracts. That in and of itself is not unusual.One of the key aspects of a new coin listing (and an ongoing listing for that matter), is the need to have sufficient liquidity in place to ensure that the coin can be traded without being susceptible to market manipulation. Low liquidity conditions open the door to bad actors moving the market relative to a particular token.Cross tradingThe indictment is far more specific in calling out illegal cross trading activity. It’s likely that these key Coinone employees would have been expecting such an indictment to land at their doors. Last week, it emerged that LUNA tokens associated with Terraform Labs’ failed Terra USD (TUSD) algorithmic stablecoin project, had been illegally cross traded on three South Korean crypto exchanges: Bithumb, GoPax and Coinone.Cross trading is the practice of trading an asset on an exchange without recording the transaction transparently on the exchange. Strictly speaking, the activity can be legitimate although most exchanges prohibit the practice as it can be used to affect market manipulation.A cross trade could be permitted in a scenario where the price is deemed to be competitive at the time that the trade takes place. While this can more easily be determined in conventional markets as the practice is covered by specific regulation, that’s not the case in most jurisdictions right now where digital asset trading is concerned. By extension, there’s a complete lack of transparency and a lack of reporting.As other market participants don’t have visibility of this type of trading activity, they are unaware as to whether a better price is available on the market or not. In an unregulated state, the practice undermines trust.In the case of Coinone, the executives enabled the practice in order to provide an illusion with regard to trading activity. That meant that trading volumes claimed were inaccurate, misleading ordinary traders and exchange users. Along with trading volume in these coins being artificially boosted, so too were token prices.In the indictment, prosecutors explicitly alleged that cross trading was being employed in an illegal manner:“This price manipulation causes misunderstandings about the trading volume and market price among general members of the exchange, and induces [service users] to participate in the coin transaction and buy the coin.”

news
Loading