Top

South Korea’s GDAC Suffers $13M hack

Web3 & Enterprise·April 12, 2023, 3:41 AM

South Korean cryptocurrency exchange, GDAC, has suffered a significant hacking incident that has resulted in the loss of approximately 23% of its custodial digital assets.

code
©Pexels/Pixabay

The hack occurred on Sunday when some of the exchange’s hot wallets were breached, and the stolen assets were transferred to an unidentified wallet. GDAC reported the incident on Monday and disclosed that the exchange lost over $13.1 million in Bitcoin, Ether, Wemix, and USDT, with more than $10 million in Wemix.

According to blockchain analytics firm Arkham Intelligence, the hacker has since swapped the USDT for ETH, sending 461 ETH to cryptocurrency tumbler, Tornado Cash. The hacker used three separate wallets to take funds from two of the exchange’s hot wallets. Arkham has labeled the wallets as follows:

GDAC Hacker 1: 0x244615D99684175d31369332039b2D84ce925EC5GDAC Hacker 2: 0x62B5eb2cb925Ce2898f9327B235b3228e7Cac1C2GDAC Hacker 3: 0x87597bDB421482190e223aCa0A4DEAd75AB0a98D

 

GDAC deposits/withdrawals suspended

GDAC has suspended its withdrawal and deposit services and reported the incident to the Korea Internet and Security Agency and the Financial Intelligence Unit. The exchange has also requested other cryptocurrency exchanges to block incoming transactions from suspicious addresses.

In a notice posted on its website, GDAC CEO Seunghwan Han apologized for the suspension of deposits/withdrawals and concern relative to the hack, adding that the firm will be working towards investor protection and safe withdrawal of funds in due course. GDAC also posted the breakdown of the digital asset quantities lost in the hack, with the hacker stealing 60.80 BTC, 350.5 ETH, 10,000 WEMIX and 220,000 USDT.

 

Crypto hacks increasing

This hacking incident comes at a time when cryptocurrency hacks have been on the rise. According to blockchain analytics firm Chainalysis, illicit actors stole $3.8 billion worth of assets last year, the largest one-year loss in crypto’s history. In addition, other crypto platforms have also suffered notable hacks and exploits in the past 15 to 18 months. Axie Infinity’s Ronin bridge, for example, suffered a $625 million hack last year, and decentralized-finance protocol Sushi was exploited for $3.3 million on Sunday.

GDAC is not the only South Korean cryptocurrency exchange to suffer a significant hacking incident. In 2018, Coinrail was hacked, resulting in the loss of approximately $40 million worth of assets, and in 2021, Upbit suffered a $50 million hack.

In response to these incidents, South Korea has taken steps to tighten regulations around cryptocurrency exchanges. In March 2021, the country’s Financial Services Commission issued a revised regulation that requires cryptocurrency exchanges to maintain stricter anti-money laundering measures and report suspicious transactions.

The GDAC hack is a stark reminder of the risks associated with cryptocurrency investing and the importance of implementing robust security measures. Investors and cryptocurrency exchanges should take note of this incident and ensure that they have adequate security measures in place to protect against potential hacks and exploits.

More to Read
View All
Web3 & Enterprise·

Aug 31, 2024

WazirX seeks moratorium as it looks to restructure its liabilities

Zettai Pte Ltd., the Singapore-based holding company that controls Indian crypto exchange WazirX through its subsidiary Zanmai India, has filed an application for a moratorium with the Singaporean High Court, under section 64 of the Insolvency, Restructuring and Dissolution Act 2018. Six months requestedIn the filing (HC/OA 861/2024), the company has pleaded with the court to be granted a six-month moratorium, which would give the firm the space and time needed to restructure its liabilities. The company laid out details of its moratorium application in a blog post published to its website on August 28. The firm outlined that a moratorium represents “ the most efficient way to address users’ cryptocurrency balances on the Platform and facilitate recovery for users.” An automatic moratorium of 30 days has effectively been granted as a consequence of the application itself, and it is up to the court if it approves the six-month moratorium that is being sought. A date for the hearing of that matter has yet to be scheduled.Photo by Palu Malerba on Pexels$234 million hack falloutWazirX has been dealing with the fallout from a $234 million hack which occurred in July. One key entity that is owed funds is Indian crypto app CoinSwitch. In an effort to get its funds back, the company has sued WazirX. Taking to the X social media platform, CoinSwitch outlined why it felt the need to take legal action. It stated: "From the day of the incident, we have tried to be in constant touch with the WazirX team, seeking recovery of the funds that are stuck on their exchange. However, our efforts have not come to fruition." In a follow-up tweet, CoinSwitch assured its own users that its exposure to WazirX has no impact on user balances. The company has WazirX exposure that amounts to 2% of its overall user funds. That exposure is reduced further if WazirX’ claim that only ERC-20 tokens were affected is taken on board, accounting for 1% of CoinSwitch user deposits. White KnightWazirX co-founder Nischal Shetty spoke to the notion of a “white knight” in an affidavit submitted under the Zettai name to support the application. He outlined that WazirX is in talks with 11 crypto exchanges and has signed three non-disclosure agreements (NDAs). The company has also received offers for financing and for partnering with Zettai, the WazirX parent company. WazirX has outlined that it has set aside $12 million in digital assets to cover legal and associated costs that the company anticipates incurring as part of its restructuring efforts. Matters are further compounded by the fact that a cloud hangs over the ownership of the company. Shetty has claimed that he is no longer an owner of the exchange. In 2022, he wrote that Binance had acquired WazirX. Around the same time frame, Binance’s Changpeng Zhao (CZ) outlined that Binance didn’t control WazirX systems.  India’s economic intelligence agency, the Enforcement Directorate, has claimed in the past that Shetty has gone out of his way to obscure the ownership structure by way of a complex chain of companies in Singapore.

news
Web3 & Enterprise·

Oct 25, 2023

Bithumb to Launch Entrepreneurship Support Program

Bithumb to Launch Entrepreneurship Support ProgramSouth Korean cryptocurrency exchange Bithumb announced on Wednesday (local time) the launch of an entrepreneurship support program to commemorate its upcoming 10th anniversary. The initiative aims to discover and nurture promising young entrepreneurs with innovative ideas to grow the industry and drive business augmentation. It is divided into two parts: an entrepreneurship competition and an investment of KRW 30 billion (approximately $22 million) to support early-stage startups.“It is time for us to support startups and bring them one step closer to success,” said the exchange’s CEO Lee Jae-won.Photo by Hunters Race on UnsplashProgram detailsThe entrepreneurship competition is open to individuals, groups, and small and medium-sized enterprises (SMEs) based in Korea that are planning to start a business or have been in operation for less than three years. Participants in any and all fields of business are eligible to enter. It offers startup grants of KRW 100 million ($74,000) for one first-place winner, KRW 70 million for three second-place winners, and KRW 30 million for six third-place winners. Winners will also receive investor relations (IR) consultations and marketing opportunities to attract future investments.Meanwhile, the KRW 30 billion investment project is open to local startups in any field that have been in operation for less than three years. Evaluators will place emphasis on how innovative or profitable the businesses are deemed, Bithumb said.“Our entrepreneurship support program is not limited to one-time support. We will strive to contribute to society by supporting entrepreneurship in various fields — not just the crypto industry — for sustained mutual growth,” Lee added.Application process datesThe application period is from November 1 to 30, and the results of the first round of applications will be announced on January 4. Those who pass the first round will be called in for an on-site evaluation. The final pool of applicants chosen for participation and investment will be announced in February.

news
Policy & Regulation·

Jan 03, 2024

Indian Web3 industry body campaigned for ‘level playing field’

An industry advocacy body for crypto and Web3 in India had urged the Indian government to take action against nine offshore exchanges, prompting the government to issue show cause notices and block URLs recently. Native industry pushbackAccording to CoinDesk, the publication has seen a copy of a letter that was sent in mid-December by the Bharat Web3 Association (BWA), addressed to the Indian Finance Ministry’s Department of Revenue Secretary, Sanjay Malhotra. The letter was penned by BWA Chairman Dilip Chenoy. Chenoy has been in the role since March of last year having a number of years of leadership experience within Indian industry bodies under his belt, with time spent previously as Secretary General of the Indian Chambers of Commerce and Industry and as Chairman of the board of Sant Longowal Institute of Engineering and Technology. According to its LinkedIn profile, the BWA seeks to “advocate for the collaboration between the regulatory bodies and the Industry for creating awareness about the new age technology and the emerging [Web3/crypto] asset class.” ‘Show cause’ noticesIt emerged last week that India’s Financial Intelligence Unit (FIU) had issued “compliance show-cause” notices to a number of overseas crypto platforms who have otherwise been active within the Indian market. The FIU is a national body tasked with liaising with and providing information to enforcement agencies where suspected illicit transactions are concerned. The offshore exchanges, including Binance, KuCoin, Huobi, Kraken, Gate.io, Bittrex, Bitstamp, MEXC Global and Bitfinex, have been given a two-week deadline to respond to the show cause notice. This notice questions why regulatory actions should not be taken against them, aiming to ensure compliance with the country's financial regulations. It’s understood that the BWA's letter requested a one-month grace period for offshore exchanges to register with the FIU. It remains unclear whether the government's actions were solely prompted by the BWA's letter or if it would have taken place independently. Notably, the BWA's letter aligns with the government's earlier mandate in March, requiring crypto businesses to register with the FIU and adhere to anti-money laundering processes under the Prevention of Money Laundering Act (PMLA). Since then, 31 domestic entities have registered with the FIU. Photo by Peter Glaser on UnsplashEnsuring a fair gameThe BWA's letter also proposes that offshore exchanges establish an Indian subsidiary, deposit the applicable tax deducted at source (TDS) from July 1, 2022 and face restrictions, including potential access blocks on mobile app stores and IP addresses, for non-compliance. While it's unclear if all these requests feature in the show cause notices, the BWA emphasizes the need for fair competition. Rajagopal Menon, Vice President of leading Indian crypto exchange WazirX, stressed that “all we are asking for is a level playing field." The BWA's letter also urges the government to grant Indian retailers a 30-day window to withdraw assets before implementing any restrictions. The fledgling BWA industry body recently celebrated its first anniversary with its founding member, CoinSwitch founder Ashish Singhal, stating that he got involved with the BWA “to help build an effective regulatory framework for Web3 and digital assets in India.” Singhal added that the BWA’s mission is “to help India realize its vision to be the leading digital economy.” 

news
Loading