Top

Hot Wallet Exploit Results in $23M Bitrue Loss

Web3 & Enterprise·April 19, 2023, 3:34 AM

Bitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.

wallet with 20 USD bills in cash
©Pexels/Karolina Grabowska

 

Hot wallet vulnerability

Hot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.

In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.

The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.

Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:

0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5

 

Reimbursing users

In response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.

The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.

 

Doubling down on security

Bitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.

The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.

It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.

According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

More to Read
View All
Web3 & Enterprise·

Sep 08, 2023

Grab Turns to Web3 With Crypto Wallet Integration

Grab Turns to Web3 With Crypto Wallet IntegrationGrab, the Singapore-headquartered Asian ride-hailing firm with a user base of 180 million people, is integrating a crypto wallet into its platform.That’s according to Chinese crypto reporter Colin Wu. Wu tweeted out news of the development on Thursday, including screenshots which he had obtained that provide further detail relative to Grab’s Web3 wallet.Often dubbed the “Uber of Southeast Asia,” Grab’s foray into Web3 technology could reshape how the region engages with cryptocurrencies. This move, initially available in Singapore, aligns with the city-state’s reputation as a fintech leader and developing crypto hub, suggesting it may serve as a testing ground for Grab’s crypto integration.Photo by Afif Ramdhasuma on UnsplashPolygon wallet integrationOne pivotal aspect of this integration is Grab’s support for the Polygon wallet, a layer-2 scaling solution for Ethereum. Known for its speed and low transaction fees, Polygon aids Grab’s venture into crypto, as these characteristics feed into its practicality for everyday crypto transactions. This strategic choice aims to make cryptocurrencies more accessible and usable for the masses.Venturing beyond paymentsIt seems like Grab’s ambitions extend beyond basic cryptocurrency payments. It is also setting the stage for users to explore non-fungible tokens (NFTs) and blockchain technology. The company has provided guidance content for wallets and NFTs which would suggest that Grab’s vision goes beyond mere transactions and that it sees the potential for NFTs in terms of transforming digital ownership and other such use cases.The Web3 wallet stands out in terms of user experience. Unlike traditional crypto wallets that are reliant on private keys, Grab employs a PIN password system. This simplifies the crypto experience. This is of particular importance when it comes to trying to find ways to bring Web3 and crypto into everyday use by the mass market.Additionally, Grab introduces an account recovery system based on questions and answers, in an effort to strike a balance between security and convenience.MAS collaborationAs part of the firm’s journey into Web3, it has been collaborating with the Monetary Authority of Singapore (MAS), the city-state’s central bank and financial regulator. Together, they’ve explored digital assets, central bank digital currencies, and innovative payment systems, and it also indicates that the company is working towards including a Web3 offering while remaining in regulatory compliance.According to the company’s Q2, 2023 results, Grab records an average of 34.9 million monthly transactions.By integrating a user-friendly crypto wallet, supporting Polygon, and exploring NFTs, it appears that Grab is aiming to empower its massive user base to participate in the digital asset revolution. With Singapore as the initial launchpad, Grab’s Web3 journey holds the potential to influence how the entire region embraces cryptocurrencies.In simplifying crypto access, supporting innovative technologies like Polygon, and educating users about NFTs and blockchain, the Singaporean firm is paving the way for a more inclusive and decentralized financial future in the region.

news
Web3 & Enterprise·

Jan 23, 2024

Terraform Labs files for bankruptcy in wake of $40 billion crash

Singapore-based Terraform Labs, the company behind the failed algorithmic stablecoin TerraUSD, has officially filed for Chapter 11 bankruptcy protection in the United States. It appears that the crypto space is not finished with dealing with the excesses and mismanagement that emerged at the end of the last market cycle. This move from Terraform comes in the wake of a $40 billion cryptocurrency crash and ongoing legal scrutiny, with the firm stating its intention to continue operations and support for the Terra community.Photo by Melinda Gimpel on UnsplashBusiness plan executionTerraform Labs was co-founded by Do Kwon, who is currently under investigation for its alleged wrongdoing relative to the failure of TerraUSD. The bankruptcy filing, submitted on Sunday to the Bankruptcy Court for the District of Delaware, aims to facilitate the company's business plan execution while navigating ongoing legal proceedings, including representative litigation in Singapore and the United States involving the Securities and Exchange Commission (SEC). In a statement, Chris Amani, CEO of Terraform Labs, commented on the decision, stating:"The Terra community and ecosystem have shown unprecedented resilience in the face of adversity, and this action is necessary to allow us to continue working toward our collective goals while resolving the legal challenges that remain outstanding." Amani reassured stakeholders that the decision ensures the company can maintain its commitment to working with the community on infrastructure, innovative tools, products and other ecosystem support. Amani became CEO of the company in July of last year, having been acting as Terraform’s COO prior to that. He acknowledged the challenges faced and expressed optimism about overcoming them, highlighting the resilience of the ecosystem after previous hurdles. Liabilities and assets in $100M to $500M rangeThe company emphasized that the Chapter 11 filing is designed to allow it to meet all financial obligations to employees and vendors without requiring additional financing. The estimated liabilities and assets fall within the range of $100 million to $500 million, as indicated in the filing. The SEC has initiated a civil trial against Terraform Labs and Do Kwon, accusing them of orchestrating a $40 billion cryptocurrency fraud through the TerraUSD algorithmic stablecoin and its sister token Luna. The SEC alleges that Terraform Labs and Kwon raised billions of dollars from investors through unregistered transactions, leading to the collapse of TerraUSD and Luna in May 2022. Both the SEC and Terraform have unsuccessfully filed for summary judgment in the case. Far-reaching consequencesThe crash had far-reaching consequences, impacting several crypto firms, including Singaporean crypto hedge fund Three Arrows Capital, Singaporean crypto lender Hodlnaut, Voyager Digital and Celsius Network. Do Kwon, a South Korean national, faces additional criminal charges in the United States related to fraud and market manipulation. His arrest in Montenegro in March 2023 and pending extradition requests from South Korea and the United States underscore the global legal challenges confronting him. The U.S. District Court for the Southern District of New York has scheduled the SEC trial against Terraform Labs and Kwon for late March, accommodating Kwon's extradition process. Meanwhile, in South Korea, Terraform Labs co-founder Daniel Shin has denied wrongdoing in the collapse as part of separate proceedings taken against him.  

news
Web3 & Enterprise·

Oct 19, 2023

Bybit Overhauls Institutional Trading Platform Bybit Institutional

Bybit Overhauls Institutional Trading Platform Bybit InstitutionalDubai-headquartered crypto exchange Bybit has announced the launch of its newly revamped institutional trading platform, Bybit Institutional.Bybit outlined details of the refreshed product offering which the company hopes will provide institutional clients with an elevated trading experience, via a blog post published to its website on Wednesday.The revamped Bybit Institutional platform claims to have introduced a host of new features that it hopes will distinguish it from competitor offerings:Photo by Gerd Altmann on PixabayLiquidityThe platform claims to be one of the largest in terms of open interest for crypto derivatives trading. This position allows for high trading volumes, creating frequent opportunities for clients to enter and exit positions. This heightened trading activity allows clients to execute orders without causing significant market price fluctuations.Asset safetyFollowing the spectacular failure of a number of crypto platforms in 2022, a lot of emphasis is being placed on client asset safety in 2023. Proof of reserve audits has been adopted by some platforms as a direct response to these failures. Bybit Institutional is offering that fail-safe in an effort to demonstrate that it maintains cryptocurrency reserves to cover all client holdings.Between routine audits, the use of robust security frameworks, multi-factor authentication, encryption, and other measures, the platform feels that it is prioritizing the security of client assets. Moreover, clients are also offered the option to utilize third-party custodial services for off-exchange settlement of trades and long-term asset storage.Fee structure optimizationThe platform is offering a fee structure that it claims to have tailored to maximize cost-efficiency for institutional traders. A customized fee schedule has been incorporated, based on trading volumes and strategies, and aimed at supporting institutions’ objectives of reducing trading costs while optimizing their returns.Eugene Cheung, Vice President and Head of Bybit Institutional, expressed his enthusiasm for the platform’s refreshed product offering, stating:“We are thrilled to introduce the new Bybit Institutional page, designed to cater specifically to the needs of our institutional clients. With our deep liquidity, commitment to asset safety, and cost-efficient fee structure, we aim to provide a seamless trading experience for institutions of all sizes.”Bybit Institutional has partnered with significant players within the industry in bringing its offering to market, such as Fireblocks, Copper, and Circle.Blockchain LifeThe United Arab Emirates-based exchange is also a participant in next week’s Blockchain Life 2023 event in Dubai, the 11th international forum on cryptocurrencies, blockchain, and mining. Cheung will participate as one of the panelists at the event on October 24. Titled “Crypto Market Outlook: Insights and Forecasts From Top Crypto Exchanges,” the panel of industry experts will delve into the current crypto landscape, emerging trends, and future forecasts.Bybit’s launch of the enhanced Bybit Institutional trading platform is indicative of the interest that exists between a range of market participants in cornering institutional business. UK bank Standard Chartered, through its Singapore-based subsidiary Standard Chartered Ventures and portfolio companies Zodia Custody and Zodia Markets, is also making a concerted effort to muscle in on this market segment.

news
Loading