Top

Kronos Research experiences significant cybersecurity breach

Web3 & Enterprise·November 21, 2023, 12:16 AM

Kronos Research, a Taipei-based crypto trading, market making and venture capital firm, has found itself in the crosshairs of a cyber attack.

Photo by FLY:D on Unsplash

 

$25.6 million loss

Hackers gained unauthorized access to the company’s API keys, resulting in losses exceeding $25.6 million spread across various cryptocurrencies, prompting a concern within the crypto community.

The breach was detailed by the company in a social media post on the X platform on Saturday. That post read:

“In the interest of transparency Around 4 hours ago, we experienced unauthorized access of some of our API keys. We paused all trading while we conduct an investigation. Potential losses are not a significant portion of our equity and we aim to resume trading as soon as possible.”

 

On-chain sleuthing

Investigations by crypto community members have followed, led by blockchain researcher ZachXBT. ZachXBT is a well-known anonymous persona in the crypto space, having earned a reputation for uncovering hacks, scams and unethical practices within the crypto sector.

In this instance, ZachXBT uncovered a trail of transactions originating from a Kronos Research account. The meticulous execution of the cyber attack was evident in six transactions involving 2,780 ETH, 2,540 ETH (repeated twice), 2,636 ETH, 4.93 ETH and 2,507.52 ETH, all directed to addresses controlled by the hacker.

Kronos Research has followed up with a tweet thread on X, acknowledging the gravity of the situation and confirming losses of approximately $25.65 million in crypto assets. Despite the alarming figures, the company sought to reassure stakeholders by emphasizing that the losses represent a relatively small fraction of its total equity. In a commendable display of accountability, Kronos Research pledged to absorb all losses internally, shielding its partners from the financial ramifications of the breach.

The Taiwanese firm posted:

“Our team has been working round the clock to minimize the impact and resume trading operations, following a hacking incident that involved unauthorized access to our API Keys.”

 

Implications for Woo X

The operational repercussions were swift and impactful, with Kronos Research opting for a temporary suspension of all trading operations. This decision rippled through to Woo X, the affiliated Taipei-based exchange and liquidity provider created by Kronos, which temporarily blocked specific asset combinations due to liquidity concerns. Importantly, Woo X assured users of the security of their funds and later announced the resumption of spot and perpetual trading.

Looking forward, Kronos Research outlined its intention to resume trading operations in the coming days, contingent on favorable conditions.

The cyber attack on Kronos Research occurred against the backdrop of heightened cybersecurity concerns within the crypto space. According to blockchain security firm Certik, approximately $173 million was lost to crypto attacks in November alone. The Kronos Research breach follows on the heels of Poloniex’s $131 million hack, highlighting the persistent challenges faced by crypto platforms in securing user assets.

More to Read
View All
Web3 & Enterprise·

Jan 05, 2026

South Korean card issuers line up stablecoin plans as regulation nears

South Korean credit card companies are preparing to develop a stablecoin-powered payment system, Yonhap Infomax reported. The Credit Finance Association (CREFIA)—a nonprofit comprising credit card firms, leasing companies, and venture capitalists—plans to launch a second task force this month. The group aims to prepare for the anticipated regulatory framework governing stablecoins.Photo by rupixen on UnsplashStablecoin cards, settlement under reviewThe task force will discuss building a comprehensive system covering the entire transaction process, from stablecoin-based card payments to merchant settlements. The agenda also includes testing stablecoin-powered debit cards, which would allow users to pay at standard card terminals just as they would with traditional cards. This second task force will include nine credit card companies—including Samsung Card, Shinhan Card, and KB Kookmin Card—that participated in the initial task force formed last July. At that time, CREFIA and the participating firms held weekly meetings on regulatory and technological issues while gathering input from external advisors. Through that process, the group examined whether credit card companies could legally engage in stablecoin businesses under the current Specialized Credit Finance Business Act. They also jointly filed 30 stablecoin-related trademark applications and reportedly sought consultations with financial authorities on securing payment and settlement accounts for stablecoin transactions. This push into the sector comes despite lingering uncertainty regarding the government’s phase-2 virtual asset legislation. Progress on the draft has been delayed due to disagreements between financial and monetary authorities. The Bank of Korea favors a model where only consortia with majority bank ownership can issue stablecoins. By contrast, the Financial Services Commission opposes setting a specific bank-ownership threshold in law to allow participation by non-bank firms. The forthcoming legislation is expected to comprehensively regulate stablecoins, including their issuance, distribution, and custody, leaving companies to await clearer guidance. Despite the legislative delays, the credit card companies are positioning themselves to move quickly once the rules are finalized. Investor sentiment shifts to U.S. equitiesWhile traditional financial firms explore digital assets to expand their business, South Korean investors are prioritizing U.S. equities over cryptocurrencies for this year. According to a weekly survey of 2,000 respondents conducted by CoinNess and Cratos, 30.8% said they plan to focus on U.S. stocks. Cryptocurrencies ranked second at 25.5%, followed by gold and silver (18.3%), Korean stocks (12.8%), and cash (12.7%). Market sentiment toward Bitcoin also appears cautious. 22.7% of respondents said they expect Bitcoin to rise or surge this week, down from 28.9% the previous week. Meanwhile, 38.3% predicted the price would move sideways, while 39% expected a fall or plunge. Asked about the broader crypto market, 50.8% of respondents said fear or extreme fear was prevailing. 

news
Web3 & Enterprise·

Dec 08, 2023

Digital wallet D’CENT and Astar Network team up to bring scalable wallet services to users

Digital wallet D’CENT and Astar Network team up to bring scalable wallet services to usersSouth Korean digital hardware wallet service D’CENT has partnered with Japan’s leading blockchain project, Astar Network, to offer users enhanced wallet scalability and seamless asset management, according to an official Medium post on Friday (local time). D’CENT will be integrated into Astar’s blockchain network.Photo by Shubham’s Web3 on UnsplashDriving blockchain innovationAstar Network is a layer 1 blockchain that supports Ethereum virtual machine (EVM) and WebAssembly (Wasm) smart contracts. Tailored to function as a centralized smart contract hub within the Polkadot blockchain ecosystem, it serves as a comprehensive platform for developers to create and deploy decentralized applications (dApps).Astar is revolutionizing blockchain for millions of users worldwide and is actively working with major South Korean companies to achieve this goal. Its newest partner, D’CENT Wallet, which currently provides cold wallet services for hundreds of users across the world, offers an easy-to-use, secure solution for managing digital assets. In particular, it boasts a convenient user experience (UX) that employs fingerprint authentication. Through the new partnership, D’CENT will become the first wallet to support Astar-zkEVM, Astar’s layer 2 scaling solution.Enhancing accessibility and interoperabilityThe two companies plan to work together to bring D’CENT’s unique services to Astar’s Japanese and global user base. Through its integration into Astar Network, the wallet now supports over 60 blockchain networks, 29 of which are EVM-compatible. Users can also store, manage and trade their ASTR tokens — Astar’s native token. This effectively removes the complicated process of managing assets across multiple blockchains.Beyond its role in asset management, the D’CENT wallet also serves as a gateway to the Polkadot ecosystem, where wallet holders can gain access to a plethora of dApps.Both D’CENT and Astar expect that their collaboration will contribute to shaping the future of blockchain transactions and fostering a more integrated blockchain ecosystem.

news
Policy & Regulation·

Nov 24, 2023

Alchemy Pay scores second money services license in United States

Alchemy Pay scores second money services license in United StatesAlchemy Pay, the Singaporean crypto-fiat payment services provider, is solidifying its presence in the United States, with the acquisition of a money services license in the state of Iowa.Photo by Austin Goode on UnsplashU.S. licensing driveThis expansion, announced on Thursday, aligns with the company’s strategy to navigate the U.S. regulatory landscape and enhance compliance with local requirements. This recent acquisition follows Alchemy Pay’s earlier achievement of a money transmitter license (MTL) in Arkansas in September. The company has not only completed the application process for MTL licenses in additional U.S. states but also expects responses in the coming months.Under the regulatory framework of Iowa, entities or individuals engaged in currency exchange or money transmission must obtain a money services license. In an interview with Cointelegraph, Alchemy Pay Ecosystem Lead Robert McCracken highlighted the Singaporean company’s commitment to a well-structured regulatory environment. McCraken stated:“We believe that a well-structured regulatory environment is essential for the sustainable growth and development of any industry, and that includes the fiat-crypto payment industry.”Despite the challenges posed by the evolving regulatory landscape in the U.S., McCracken affirmed the company’s dedication to seeking licenses and upholding compliance standards as it expands operations. He described this approach as “more challenging but ultimately correct” for ensuring the long-term success of the crypto payment industry.Global market expansionIn addition to its U.S. endeavors, Alchemy Pay is actively pursuing license applications and market expansion opportunities globally, including in the United Kingdom and Hong Kong. The firm operates in 173 countries already, facilitating transactions through various payment methods, including Visa, Mastercard, regional mobile wallets and domestic transfers.In April, the company secured $10 million in funding from Singaporean venture fund and market maker DWF Labs, with a view towards expanding the business in South Korea. The following month, it enabled a rupee-denominated on-ramp, integrating with India’s UPI real-time payments system. In July, it partnered with well-known payments processor Checkout.com, integrating its Visa and Mastercard channels into its on and off-ramps.ICP collaborationThe collaborations and partnerships keep coming with Alchemy Pay and with that, on Wednesday it announced a strategic partnership with the Internet Computer (ICP) smart contract platform.That collaboration will see the listing of ICP, Internet Computer’s native token, on Alchemy Pay’s fiat on-ramp. This is the latest in a line of collaborations the crypto payments gateway has made with layer one and two blockchain network projects, including Polygon, Avalanche, Algorand and Arbitrum.These latest strategic expansions align with the company’s vision to establish a strong global presence while navigating and contributing to the ongoing evolution of crypto regulatory frameworks. Currently, comprehensive regulations for the entire crypto industry in the U.S. are under consideration by regulators, reflecting the dynamic nature of this rapidly evolving sector.

news
Loading