Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Policy & Regulation·

Jan 09, 2025

Bhutan’s GMC to establish strategic crypto reserve

Bhutan’s Gelephu Mindfulness City (GMC), a special administrative region (SAR) within the Kingdom of Bhutan, plans to establish a strategic cryptocurrency reserve.Photo by Ameya Sawant on UnsplashBitcoin, Ether & BNBThat’s according to an announcement published by the new administrative region on Jan. 8. In that statement the GMC SAR outlined that it has the intention to “recognise digital assets such as Bitcoin (BTC), Ether (ETH) and BNB as part of its strategic reserves.” The SAR acknowledged that the move would result in it becoming one of the first jurisdictions to officially put in place the holding of digital assets as part of strategic reserves. While it cited Bitcoin, Ether and BNB, the SAR outlined that it has the intention to recognize digital assets with large market capitalizations and deep liquidity. That requirement has been set out so that it can easily trade in and out of these assets without impacting asset prices on the open market. The Kingdom of Bhutan is no stranger to cryptocurrency. It emerged in 2023, through court filings in the bankruptcies of crypto lenders Celsius and BlockFi, that Bhutan had cryptocurrency holdings managed by Druk Holding and Investments, the commercial arm of the Royal Government of Bhutan.  An evolution of Bitcoin mining activityShortly afterwards, it was revealed that Bhutan had been mining Bitcoin since it was priced at $5,000. Crypto mining was deemed to be a good fit for the Kingdom, given its considerable hydroelectric resources. Bhutan has entered into partnerships with Singapore-headquartered crypto mining firm Bitdeer to jointly develop green digital asset mining operations. Given this background, the SAR stated that adding crypto as part of a strategic reserve would be “an evolution of the jurisdiction’s involvement in bitcoin mining.” Crypto rather than Bitcoin-onlyTaking to the X social media platform, the BNB network project described the move as “a major milestone for blockchain adoption.” It added that the SAR’s inclusion of BNB suggests the existence of global trust in the BNB Chain ecosystem and belief in its utility. Binance founder Changpeng Zhao (CZ) also chimed in, pointing out that the Bhutan GMC SAR isn’t just considering a Bitcoin reserve but one which includes crypto more broadly. CZ added that this demonstrates that Bhutan is open-minded and open to the consideration of cryptocurrencies beyond Bitcoin. The Binance founder said that this development “opens the door for BNB (and other crypto) to be included in other countries' National Strategic Reserves.” He believes that this will be the first of many strategic crypto reserves to be established. “This is a smart move by the country to attract crypto companies, investments, and innovation,” he added. The GMC SAR covers an area of 1,000 square kilometers, making it larger geographically than the city-state of Singapore. Its objective is to become a global leader in sustainable development, with a specific emphasis on holistic living, mindfulness and economic development.  The Bhutanese authorities intend for GMC to become a gateway for tourists visiting the area and Bhutan more broadly. It’s also seen as an initiative which can garner further foreign direct investment. According to data published by on-chain analytics firm Arkham Intelligence, the Kingdom of Bhutan holds 11,688 BTC ($1.1 billion) and 656 ETH ($2.18 million). 

news
Policy & Regulation·

Feb 05, 2025

Hong Kong’s SFC flags suspect platforms disguised as HashKey

The Securities and Futures Commission (SFC), an independent statutory body that regulates Hong Kong’s securities and futures markets, has alerted investors to 33 suspicious websites which appear to be masquerading as HashKey, one of the Chinese autonomous territory’s first licensed virtual asset exchanges.Photo by Dan Freeman on UnsplashAlert listThe regulator flagged the websites by publishing their domain names to its alert list. Hong Kong’s SFC first published its alert list relative to suspicious crypto-related entities in November 2021. In terms of both suspicious trading platforms and suspicious crypto-related web links, the regulator has found 91 instances to date. Remarks added to the listing confirm that a HashKey company, Hash Blockchain Limited, had reported the websites to the regulator as fraudulent websites. The web domain links have been slightly modified when compared to official links to the HashKey website, in an effort to mislead HashKey customers. A little less than two weeks ago, HashKey published a statement to its website, making service users aware of the fraudulent links and websites. It stated: “Fraudulent websites will appear under different domain names or with slight modifications or variations of the official HashKey Exchange website address www.hashkey.com by adding a combination of letters, numbers or symbols.” The company added that it has no connection with these websites, that no affiliation exists with HashKey Exchange, and consequently the company doesn’t accept any liability for any matters relating to these fraudulent websites and links. As well as the regulator, HashKey has also reported the matter to the Hong Kong Police Force. Tackling crypto-related fraudBoth law enforcement and regulators in Hong Kong have been more proactive in tackling any signs of crypto-related fraud or potential scams following an episode of fraud involving an unlicensed Dubai-headquartered crypto exchange, JPEX, in 2023. At that time, the authorities within the Chinese autonomous territory received in excess of 2,369 complaints from Hong Kong residents who had been duped by the unregulated exchange. Overall, victims were out of pocket to the tune of $166 million. Some commentators had likened the JPEX scandal as being an “FTX moment” for Hong Kong, referring to the high profile collapse of Bahamas-headquartered crypto exchange FTX in November 2022. However, Hong Kong investors also suffered as a result of the FTX collapse.  In fact, the Hong Kong Monetary Authority (HKMA) and the SFC were listed as FTX creditors in 2023. The statutory bodies appeared on the FTX creditor list alongside 50 Hong Kong institutions. Towards the end of 2023, the agency issued a public warning regarding HongKongDAO and BitCuped, entities that were accused of misinformation. In February 2024, the SFC issued a reminder to investors within the Chinese autonomous territory to ensure that they’re only engaging with licensed cryptocurrency platforms. To date, the regulator has awarded crypto trading licenses to seven virtual asset trading platforms (VATPs). Earlier this month, the regulator extended use of its swift licensing process to all new applicants in an effort to fast-track the approval of more licensed platforms.

news
Policy & Regulation·

Jul 29, 2023

Indian Supreme Court Scolds Government over Crypto Regulation Delay

Indian Supreme Court Scolds Government over Crypto Regulation DelayThe Indian Supreme Court did not mince words recently as it criticized the Union government for its failure to establish clear cryptocurrency regulations in the country.Photo by Studio Art Smile on PexelsLack of crypto clarityThat’s according to a report published by local media outlet, the Hindustan Times, on Friday. It’s understood that the Supreme Court is frustrated with regard to the lack of guidelines surrounding cryptocurrencies. That frustration has arisen as crypto is increasingly coming to the attention of the courts due to it being associated with a rising number of criminal activities.The court directed the government to provide information about any plans to set up a dedicated federal agency to investigate crypto-related crimes. During the proceedings, Justices Surya Kant and Dipankar Datta expressed their disappointment, pointing out the absence of any concrete laws pertaining to cryptocurrencies.Crypto bill failingsThe context for the court’s remarks was the ongoing hearing of petitions related to cryptocurrency fraud cases across different states in India. In light of the gravity of these cases, the court demanded a response from the government regarding its capability to establish an effective mechanism to investigate crypto-related crimes.The struggle for clear and comprehensive crypto regulations in India has been long-standing. As far back as 2018, the government was instructed by the Supreme Court to draft a crypto bill, but progress has been slow. The government has continually promised to provide legislative clarity over the past few years. Despite this, the final draft of the crypto bill has not been produced.Crypto taxesGovernments may drag their feet when it comes to regulatory clarity relative to unfolding innovations but they’re far more responsive when it comes to taxes. The Indian government acted swiftly to impose crypto taxation laws, which took effect in April 2022.During that bull market period, India emerged as one of the leading crypto markets, witnessing the rise of several crypto unicorns and significant trading volumes amounting to billions of dollars. However, the introduction of tax laws had an adverse impact on the thriving crypto industry. Added to that, the lack of regulatory clarity caused many established firms to relocate from India, seeking more favorable environments for their operations.Market potentialDespite the government’s lethargic legislative response and heavy-handed tax policy, there are still reasons for optimism with regard to the development of crypto in India. India’s fintech sector is the third largest in the world, driven more recently by rapid digital adoption, together with efforts to bring about financial inclusion.Last month, Xapo Bank, a Gibraltar-based crypto bank, was sufficiently encouraged by the potential offered in India to enter the Indian market. Earlier this week, the world’s largest asset manager, BlackRock, announced that it was partnering with Jio Financial and re-entering the Indian market after a six-year hiatus.The move could have implications for crypto in India given that BlackRock has changed its tack on crypto, having recently filed an application to launch a bitcoin exchange-traded fund (ETF) in the United States.Notwithstanding these developments, concrete regulatory guidelines will not only protect against criminal activities but also foster a conducive environment for legitimate innovation and growth in the cryptocurrency space.

news
Loading