Top

Remitano Struck by $2.7M Alleged Hack

Policy & Regulation·September 16, 2023, 1:21 AM

Hacks have been an unfortunate constant in the crypto and DeFi space with that reality having been compounded by news that Seychelles-based crypto exchange Remitano is believed to have been the victim of a $2.7 million heist.

Photo by Growtika on Unsplash

 

Suspicious transactions

It’s understood that the firm encountered highly suspicious transactions, with the $2.7 million having seemingly vanished from its wallet, all at the hands of a single account. The incident unfolded on Thursday and has left blockchain analysts speculating about a potential security breach.

The Remitano hot wallet initiated transfers to an address devoid of any prior transaction history. These transfers amounted to approximately $1.4 million in Tether (USDT), $208,000 in USD Coin (USDC), and 104,000 ANKR tokens (valued at $2,000 at the time). Those transfers raised concerns about the security of the platform.

Israeli blockchain analytics platform Cyvers promptly sounded the alarm, notifying the crypto community about these suspicious transactions that had drained significant sums from Remitano’s coffers. This sudden event raised concern within the crypto space and naturally among Remitano customers.

 

Tether freezes wallet address

Amid the growing apprehension, Tether, the issuer of USD stablecoin USDT, took decisive action by freezing the address associated with the alleged attacker. This swift intervention effectively halted any further movement of $1.4 million worth of drained cryptocurrency. Tether’s proactive response could potentially have prevented additional loss, preserving customers’ assets from further depletion.

Remitano had remained notably silent initially in the wake of this incident, declining to issue any formal statement regarding the breach. It has since acted, as on Friday, it published a statement relative to the issue on its website. The absence of communication from the exchange had only fueled greater speculation surrounding the incident. However, the statement outlined:

”On September 14, 2023, our Security Management team discovered a data breach from a third-party source that had compromised some of our sensitive information. As a result, a small amount of funds from the exchange’s hot wallets were transferred to suspicious wallet addresses through unauthorized withdrawal transactions.”

Remitano, recognized as a peer-to-peer cryptocurrency exchange and payment processor, primarily caters to users in emerging markets across several countries, including Pakistan, Ghana, Venezuela, Cambodia, Kenya, Malaysia, India, South Africa, Vietnam, and Nigeria.

The firm sought to reassure its customers:

”As of now, Remitano ensures that users’ assets have NOT been and will NOT be affected by this incident. We are working tirelessly to uphold our commitment to ensuring the security and protection of your crypto assets.”

Remitano was established in 2015; it is operated by Babylon Solutions Limited, which is headquartered in the Seychelles.

Unfortunately, this episode adds to the troubling trend of cryptocurrency exchange hacks witnessed in 2023. Authorities in the United States have attributed these attacks to the Lazarus Group, a notorious cyber-crime organization allegedly linked to the North Korean government which has wreaked havoc globally although disproportionately so within the Asian region.

More to Read
View All
Web3 & Enterprise·

Dec 06, 2023

Bithumb celebrates 10th anniversary with a commitment to change

Bithumb celebrates 10th anniversary with a commitment to changeBithumb, South Korea’s major fiat-to-cryptocurrency exchange, celebrated its 10th anniversary on Wednesday (local time), as per a report by local news agency Newsis.Photo by Adi Goldstein on UnsplashFoundation for the marginalizedTo celebrate this occasion, the platform has set up a foundation with a budget of KRW 10 billion (approximately $7.6 million). The foundation is dedicated to addressing the challenges faced by marginalized individuals in the community.Bithumb has also introduced a new slogan, “Deep change for customers,” reflecting the exchange’s commitment to transformation, its top core value.Demonstrating such efforts, the platform has implemented a zero-trading fee policy for all supported cryptocurrencies since October. This policy will remain in effect until further notice. In response to this competitive move, other players in the market followed suit. Later in the same month, Korbit introduced fee-free trading for all types of tokens, and Gopax removed trading fees for four major cryptocurrencies: BTC, ETH, XRP and USDC.IPO planned in 2025Furthermore, Bithumb is striving to go public on the Korean stock market, a move partly driven by criticisms of inadequate governance transparency. The virtual asset service provider aims to conduct an initial public offering (IPO) in the second half of 2025. Through this IPO, Bithumb intends to demonstrate its corporate transparency and strengthen its position as a trustworthy exchange.Identifying and fostering young entrepreneurs is another initiative Bithumb is spearheading. The crypto exchange is processing applications from aspiring business owners for its support program. These applicants will be assessed based on their creativity and the feasibility of their business models without any restriction on the type of business area they are involved in. For this purpose, Bithumb has allocated KRW 30 billion to support startups that have been operational for less than three years.User engagement eventsA customer engagement event called the “10 Bitcoin 1/N challenge” is also underway for Bithumb users. Participants in this event will have the opportunity to equally share a total of 10 BTC. To join, customers need to send the message “Happy 10th birthday, Bithumb” to Bithumb’s KakaoTalk channel. Upon successfully sending this message, customers will receive a coupon code. After receiving a coupon code, they must apply it on the Bithumb app. The distribution of rewards is set for Dec. 11.In addition, Bithumb is set to airdrop cryptocurrencies worth up to KRW 1 million to users who have been inactive for an extended period. To participate, these users simply need to log into the Bithumb app and enter the MISS-YOU coupon code. This promotional event will last from Dec. 6 to 12, with the airdrop occurring on Dec. 18.Lee Jae-won, CEO of Bithumb, remarked that Bithumb’s 10-year journey mirrors the rapid growth and evolution of the cryptocurrency market. He emphasized that the exchange believes growth stems from embracing new challenges and transformative efforts. Lee added that Bithumb is determined to implement authentic changes to better serve its customers.

news
Web3 & Enterprise·

Jul 15, 2025

DDC Enterprise signs MOU with Animoca Brands in $100M deal

Animoca Brands, a Hong Kong-based Web3 company focused on blockchain gaming and NFTs, has signed a memorandum of understanding (MOU) with DayDayCook (DDC) Enterprise Limited in a deal that will see Animoca allocate up to $100 million in Bitcoin with that capital to be exposed to yield enhancement strategies operated by DDC.Photo by Erika Fletcher on UnsplashBitcoin treasury strategyIn a press release published to its website, Animoca Brands claimed that the deal accelerates the Bitcoin accumulation strategy pursued by DDC. Back in May, DDC Enterprise, a Chinese company listed on the Nasdaq in the U.S. while headquartered in Hong Kong, became one of many Nasdaq-listed companies recently to add Bitcoin to its balance sheet.  At that time, it made a symbolic initial 21 BTC purchase, bearing in mind the leading digital asset has a supply cap of 21 million BTC. The company has set out an ambitious plan to build up a Bitcoin treasury of 5,000 BTC over the course of three years. DDC Founder Norma Chu described the development as a “pivotal moment.” ‘Pristine monetary asset’On this occasion, Chu described the partnership with Animoca as a “transformative step,” reflecting the companies’ “shared vision to accelerate Bitcoin’s role as a pristine monetary asset.” As part of the partnership, Animoca Brands Co-Founder and Executive Chairman, Yat Siu, will join DDC’s Bitcoin Visionary Council (BVC). The company established the BVC recently in order to put strategic leadership and guidance in place so that DDC’s Bitcoin-related treasury operations are conducted in accordance with industry standards so as to maximize value creation in the long term. Siu said that the arrangement enables Animoca Brands “to enhance the value of [its] blockchain technologies and maximize the value of [its] Bitcoin holdings.” Commenting further on the partnership, he added: “We will focus on developing strategies to enhance Bitcoin’s value proposition, leveraging DDC’s commitment to advancing corporate Bitcoin treasury solutions." Siu told Cointelegraph that Animoca Brands' belief in the abilities of the DDC founder played a large part in the company establishing the partnership. He said that her background and experience enable her to “bridge the East and West to successfully navigate markets on both sides of the planet,” adding that “she has good appeal and connections to the Chinese market, one of the largest for crypto adoption, while also running a NASDAQ-listed company.” On BitcoinTreasuries.net, a Bitcoin treasury data hub, DDC is listed as 47th in terms of corporations globally that have adopted a Bitcoin treasury strategy, ranked by the amount of Bitcoin that they have accumulated. The website suggests that DDC currently holds 368 BTC, valued at approximately $43.2 million. Following its initial purchase of 21 BTC in May, the company followed up with the acquisition of 38 BTC in June. On July 1, it announced that it had raised $528 million to expand its Bitcoin holdings, with confirmation of a further purchase of 230 BTC by July 7.

news
Policy & Regulation·

Dec 13, 2023

NFTs not subject to South Korea’s Virtual Asset User Protection Act

NFTs not subject to South Korea’s Virtual Asset User Protection ActIn anticipation of the Virtual Asset User Protection Act coming into effect in July of next year, the South Korean Financial Services Commission (FSC) has issued an advance notice regarding its subordinate statutes.Photo by Ethan Brooke on UnsplashSeven specific provisionsThe subsidiary regulations under the Act detail seven specific provisions aligned with the Act’s objectives. Firstly, assets categorized as electronic securities, mobile vouchers, deposit tokens backed by the Bank of Korea’s central bank digital currencies (CBDCs) and non-fungible tokens (NFTs) will not be classified as virtual assets and hence, not regulated by this Act. However, in instances where NFTs are used as a means of payment for specific goods or services, they will be regarded as virtual assets.Secondly, banks will take responsibility for managing the deposits of users on cryptocurrency exchanges. This aligns with the Act’s requirement for virtual asset service providers (VASPs) to keep users’ funds separate from their own, either by depositing them in, or entrusting them to, reputable institutions. Under these regulations, banks are required to manage users’ assets in a manner consistent with how investors’ deposits are handled under the Capital Markets Act. This means that banks are allowed to invest VASP users’ assets only in secure instruments, such as state and local government bonds, and are also obligated to pay fees to deposit owners, taking into account the yields of these investments.80% of user assets in cold walletsThe third key aspect of the regulations is that VASPs are required to store a minimum of 80% of user assets in cold wallets, which are not connected to the internet. This is higher than the current requirement of 70%, enhancing the security measures for users of virtual assets. To calculate the total value of a virtual asset at any given time, its total supply is multiplied by its average daily price over the past year. VASPs are obligated to assess the value of virtual assets every month.The fourth regulation mandates that VASPs must enroll in an insurance plan, contribute to a rainy day fund or accumulate reserves. This is to ensure they can fulfill their compensation responsibilities in the event of incidents like security breaches or technical failures. The required preparation amount is set at a minimum of 5% of the user assets stored in hot wallets, as these are more susceptible to risks. VASPs are required to update their compensation thresholds or reserves monthly and must take any necessary actions to comply with these requirements by the next working day following the update.Information disclosure guidelinesAnother regulation addresses the issue of insider trading in the context of the virtual asset market. Under the current Capital Markets Act, information is considered disclosed when it’s made available through disclosure systems of the FSC or the Korea Exchange (KRX). However, since the cryptocurrency market lacks a similar system, the new statute provides criteria for determining when information is deemed disclosed.For instance, if a VASP, including exchanges, releases crucial information about a virtual asset on an exchange and six hours pass, that information is regarded as disclosed. This acknowledges the non-stop nature of the crypto market. Moreover, information disclosed post 6 p.m. is treated as officially disclosed after 9 a.m. the next day.Additionally, if a virtual asset issuer publishes significant information about its token on a website hosting its white paper, the information is deemed public after one day. This is conditional upon the website being publicly accessible and having consistently provided important token information for the preceding six months.These rules aim to provide clarity and fairness in information disclosure in the crypto market, adapting the principles of traditional financial markets to the unique dynamics of virtual assets.No arbitrary suspension of transactionsThe sixth regulation restricts VASPs from arbitrarily halting deposits and withdrawals of virtual assets unless there are justifiable reasons for such actions. Acceptable circumstances for suspending these transactions include situations where the VASP experiences a technical disruption in its system, where regulatory authorities instruct a VASP to cease deposits and withdrawals or where cyberattacks or similar incidents have occurred or are clearly imminent.Lastly, virtual asset exchanges are required to monitor for abnormal transactions continuously. These are transactions that show substantial shifts in the prices or trading volumes of virtual assets, particularly in response to news or rumors that could influence cryptocurrency prices. If VASPs suspect unfair trading practices, they must report to the FSC or the Financial Supervisory Service (FSS). When there is ample evidence of such activities, crypto exchanges are obligated to notify the police or the prosecutors’ office. In addition, the financial regulator has the authority to levy fines based on the prosecution’s decisions or after completing consultations with the prosecution if a year has passed since the day of the report.During the period of advance notice, which spans from Nov. 11 to Jan. 22, the FSC will seek comments from relevant organizations, experts and businesses. This process is aimed at refining the rules and regulations subordinate to the Virtual Asset User Protection Act. Moving forward, the financial authorities plan to publish a set of guidelines and Q&A materials and conduct explanatory sessions, with the goal of ensuring a smooth implementation of the Act.

news
Loading