Top

CoinEx Reveals Insights Into Recent Platform Hack

Policy & Regulation·September 20, 2023, 1:33 AM

Hong Kong crypto exchange CoinEx has issued a further update relative to the security breach that occurred on the platform last week resulting in one of the exchange’s hot wallets being compromised.

Photo by FLY:D on Unsplash

 

Immediate response

In the immediate aftermath of the $70 million hack, CoinEx took action to safeguard user assets and initiate an investigation into the incident. It suspended all deposit and withdrawal services and executed an emergency shutdown of the hot wallet server. Following this, the company securely moved the remaining assets to cold storage, commencing the process of reconstructing and deploying a new wallet architecture.

The firm also engaged in an investigation, spearheaded by its wallet and security teams, to ascertain the extent of the breach. Moreover, CoinEx claims to have proactively reached out to fellow exchanges to freeze any assets related to the attack.

Haipo Yang, the Founder and CEO of CoinEx, conveyed his apologies to affected users through his personal X (formerly Twitter) account. He emphasized the team’s commitment to restoring services promptly and reassured users that their funds will remain secure.

Following up on that commitment, CoinEx published an update on the hot wallet hack on September 15 to address these concerns individually.

 

New wallet deployment

The exchange expects to finalize wallet upgrades within the upcoming week, after which withdrawals will gradually be phased in, subject to security evaluations. The CoinEx team is currently working on developing and deploying an entirely new and robust wallet system capable of managing activities across 211 chains and 737 assets.

The firm has outlined that each of its product lines operates independently, featuring its own risk control system. Consequently, the security incident that occurred on CoinEx will not affect the integrity of its other product lines.

In its most recent update on Tuesday, the Hong Kong crypto exchange confirmed that 80% of its wallet system has now been reconstructed. It added that it has initiated preparations to enable the withdrawal system on the platform. It stated:

”Details about the resumption of withdrawals, including specific dates, times, and arrangements, will be announced on the CoinEx website. Please stay updated on our announcements for the latest information.”

 

Ongoing investigation

Regarding the identity of the attacker, CoinEx has confirmed that the matter is currently under investigation. While some security firms have made attribution claims, the company is focusing primarily on deploying the new wallet architecture, restoring affected users and functionalities, and enhancing overall security.

At the same time, the company has initiated communications with the hackers in a bid to proactively seek a mutually agreeable resolution. While the incident implicates the loss of a substantial amount of funds, the firm maintains that in the context of the overall business, the sum represents only a small percentage of total assets under its management.

Exchange security remains a major challenge in the crypto sector, with hacks happening on an ongoing basis. Last week, Seychelles-headquartered peer-to-peer crypto platform Remitano acknowledged a $2.7 million hack. At the beginning of September, crypto gambling platform Stake was reported to have suffered a $41 million hack.

More to Read
View All
Web3 & Enterprise·

Sep 06, 2023

Korbit Passes Post-Audit for ISMS-P and ISO Certifications

Korbit Passes Post-Audit for ISMS-P and ISO CertificationsSouth Korean crypto exchange Korbit announced on Wednesday that it has successfully passed a post-audit to maintain its Personal Information and Information Security Management System (ISMS-P) certification and four different International Organization for Standardization (ISO) certifications — ISO 27001, ISO 27017, ISO 27018, and ISO27701.“By maintaining our ISMS-P and ISO certifications this year, we were able to reaffirm the stability and trustworthiness of Korbit’s personal information protection capabilities and security management system,” said Oh Se-jin, CEO of Korbit.Photo by FLY:D on UnsplashRigorous criteriaThe ISMS-P is a security management system jointly operated by the Ministry of Science and ICT and the Personal Information Protection Commission, representing the highest level of security management in Korea. It combines 80 requirements for Information Security Management System (ISMS) certification and 22 requirements for Personal Information Management System (PIMS) certification, totaling 102 requirements that must be met. Once obtained, certification is valid for three years, and annual post-audits are required to maintain its validity.Korbit first obtained ISMS-P certification in September of 2021 and has once again passed this year’s post-audit that was conducted last Wednesday.Meeting international standardsIn addition, the exchange had previously passed post-audits for four ISO certifications related to information protection and personal information management systems earlier in June. This includes ISO 27001 for information security management systems, ISO 27017 for information security controls on cloud services, ISO 27018 for protection of personally identifiable information (PII) in public clouds, and ISO 27701 for privacy information management systems.This achievement demonstrates Korbit’s commitment to reliability and security when operating and managing exchange services.“As a crypto exchange, we will continually focus on strict security management to ensure the protection of customer information and assets,” said CEO Oh.

news
Policy & Regulation·

Apr 12, 2024

DPK’s landslide win in general election stokes anticipation of spot Bitcoin ETFs approval in Korea

A couple of days have passed since the 22nd general election took place in South Korea, whose results have disappointed President Yoon Seok-yeol and the country's ruling People Power Party (PPP). The main opposition Democratic Party of Korea (DPK) won the election in a landslide, securing a total of 175 seats out of 300 in the National Assembly.   Now, with the DPK set to continue exerting control over the National Assembly, financial industry insiders are focusing on whether the liberal party will stick to its campaign pledges to ease regulations on cryptocurrencies and related products – most notably, approving investment and trading of spot Bitcoin exchange-traded funds (ETFs) within the country, according to media outlet Yonhap Infomax. Ever since the U.S. Securities and Exchange Commission (SEC) approved spot Bitcoin ETFs in January, interest surrounding such products has intensified among Korean investors. Photo by Alesia Kozik on PexelHowever, the Korean Financial Services Commission (FSC) has been reluctant to approve such spot ETFs, citing the potential risk of such approval violating the Financial Investment Services and Capital Markets Act. Various pledges to ease crypto regulations The DPK, in response, has introduced several campaign pledges aimed at easing crypto regulations, both to win votes from younger Koreans – especially those in their 20s and 30s who make up a significant portion of crypto investors in the country – and to bolster the local crypto market. Among these pledges was to include virtual asset ETFs in Individual Savings Account (ISA), which would enhance tax breaks for crypto gains. Another notable pledge was to deduct taxes on crypto gains worth up to KRW 50 million (approximately $36,560). Under the current law, only crypto gains within the limit of KRW 2.5 million qualify for the tax deduction. One local crypto insider commented on the outcome of the general election, saying that the industry will need to keep an eye on how the situation surrounding crypto regulations develops, as easing such regulations was one of the key promises the DPK made during the election campaign period.   Still, long way ahead for Korea to approve spot Bitcoin ETFsMeanwhile, CryptoQuant CEO Ki Young Ju left a comment yesterday on the X (formerly Twitter) post written by crypto analyst MartyParty, which reads, "South Korea has approved spot Bitcoin ETFs."  Ju pointed out that South Korea still has "a long way to go" when it comes to approving spot Bitcoin ETFs, noting that just because "the Bitcoin-friendly Democratic Party," or the DPK, won the general election doesn't mean that financial regulators have approved such products.  

news
Web3 & Enterprise·

Dec 22, 2023

TRES secures $11M funding to expand multi-chain tax reporting

Tel Aviv-based cryptocurrency accounting and taxation reporting platform TRES has successfully raised $11 million in a funding round led by Faction Ventures, with participation from New Form, Boldstart Ventures, Cyber Fund and Ambush Capital.Photo by Markus Winkler on Unsplash Sustained investor buy-inThe firm announced this latest financing round on its website on Wednesday. It brings TRES’s total funding to $18.6 million. This recent instance of funding comes on the heels of TRES’s previous success in securing $7.6 million in seed funding in September 2022. That round was led by Boldstart Ventures and Alchemy Ventures. The diverse participation included F2, New Form, Kenetic Capital, Blockdaemon Ventures and Mantis. With Miami-based Boldstart Ventures being a key investor in both funding rounds, Boldstart partner Shomik Ghosh took to social media on Wednesday to comment on this latest development, stating: “The Tres team and founders @TalZackonand @eilonlotem embody perseverance more than anyone I’ve ever met[.] So proud to work with you guys and learn how to handle yourselves in stressful situations taking care of family, friends, colleagues, and country[.]” $19B client baseTRES currently serves a client base with combined assets valued at $19 billion, offering comprehensive solutions to manage, monitor and reconcile digital asset activities. The platform supports over 100 Layer 1 and Layer 2 blockchains, including popular ones like Bitcoin, Ethereum, Solana and Avalanche. Notably, TRES has ambitious plans to continually expand its supported blockchains, aiming to introduce support for “new blockchains every week,” according to a recent announcement. As the cryptocurrency industry witnesses increased institutional adoption, there is a growing demand for sophisticated accounting and taxation reporting tools, mirroring those available in traditional finance. TRES is working towards positioning itself to address this need by providing a comprehensive solution for firms to gain a “full and accurate picture across all of their Web3 financial activity,” stated Tal Zackon, co-founder and CEO of TRES. Zackon emphasized the importance of compliance across accounting, audit and reporting functions, asserting that TRES facilitates an easy path for customers to navigate these regulatory landscapes. The Series A funding round, led by Faction Ventures, signifies TRES’s commitment to further developing its platform to meet the evolving needs of the crypto industry. Optimistic outlookZachon told The Block that the outlook for crypto looks bright in terms of extending its appeal to new market participants. He stated: “This next bull cycle will have something that no other bull cycle before it had — dozens of live blockchain networks, thousands of decentralized applications, battle tested infrastructure, and the adoption by major banks and government organizations around the world. The number of companies that will hold crypto on its balance sheets is about to explode, and we are here to serve them — no matter how complex the transactions are.” With this latest round of venture capital backing, TRES appears to be well-positioned in striving to become a key player in facilitating transparent and compliant financial operations for an ever-expanding array of blockchain networks and decentralized applications. As the crypto industry matures, the importance of robust accounting and taxation reporting solutions like TRES is poised to grow in tandem with the increasing complexities of financial transactions within the blockchain ecosystem.

news
Loading