Top

HTX experiences $258 million outflow post-hack

Web3 & Enterprise·December 12, 2023, 1:15 AM

HTX, the digital-asset trading platform associated with Chinese-born crypto mogul Justin Sun, has witnessed a substantial net outflow of $258 million since resuming operations after a significant security breach.

According to Bloomberg, data from DefiLlama indicates that the outflow occurred between the exchange’s restart on Nov. 25 and Dec. 10, signaling unease among some clients following last month’s cyberattack. In November, HTX reported a loss of $30 million in crypto tokens due to the breach, prompting a temporary suspension of withdrawals and deposits.

Towards the end of last month, the platform re-enabled withdrawal services for major cryptocurrencies, gradually bringing the exchange back to full service, supporting withdrawal of all digital assets.

Photo by Amritanshu Sikdar on Unsplash

 

Multiple hacks

Justin Sun is also associated with the Poloniex exchange and the HECO Bridge, a network established by HTX for blockchain transfers. Both Poloniex and HECO fell victim to hacks in November, resulting in the theft of approximately $200 million in crypto. It’s worth noting that hackers had previously stolen $8 million from the HTX platform in September.

HTX, which was formerly known as Huobi up until a business rebrand in September, boasts an average trading volume of $1.5 billion in the past 24 hours, securing its position as the fifteenth largest exchange when measured in terms of trading volume.

 

Increased vigilance

In the wake of several high-profile crypto platform failures in 2022, digital-asset investors are increasingly vigilant about monitoring flows and reserves at virtual currency exchanges. In particular, that trend gained momentum after the FTX platform’s collapse last year due to fraud.

November turned out to be the most damaging month this year so far in terms of platform digital asset theft. Exit scams and exploits encountered during the month totaled a staggering $363 million in losses.

In October, the UK’s Financial Conduct Authority (FCA) included HTX, alongside KuCoin, on a warning list, due to their promotion of services in the UK, without having obtained the required regulatory approvals.

 

A third of reserves in Bitcoin

DefiLlama data reveals that Bitcoin constitutes the largest portion of HTX’s reserves, accounting for approximately 33%. Tron’s TRX token, launched by Sun in 2017, represents around 32% of the reserves. HTX’s native exchange coin, HT, makes up 14%, followed by a Sun-backed token named stUSDT at 12%.

In August, Travis Kling, Founder of Ikigai Asset Management, had this warning relative to Sun and HTX:

”Justin Sun is a criminal. There’s a hole in Huobi, a hole in TUSD and a hole in Tron DeFi. Act accordingly.”

TRX, at the center of U.S. fraud allegations against Sun, prompted a March lawsuit by the Securities and Exchange Commission (SEC), accusing him and his firms of market manipulation to inflate the token’s trading activity. Sun dismissed the suit on the X social media platform back in March, stating that it “lacks merit.” On Sunday, Sun claimed that the Tron blockchain network which he founded had reached a new milestone of 200 million users.

Despite security firm BlockSec reporting the recovery of the $8 million stolen in September, hackers still appear to control the $30 million taken last month. The ongoing situation raises concerns about the security measures and resilience of HTX in the face of persistent cyber threats.

More to Read
View All
Markets·

Mar 17, 2025

North Korea becomes major nation-state holder of Bitcoin following hack

While South Korea’s central bank has opted not to accumulate Bitcoin (BTC) at a nation-state level, North Korea has become a major holder of the leading crypto asset, albeit in a very unconventional way. The Democratic People's Republic of Korea (North Korea) is believed to currently be in possession of 13,518 BTC. That’s according to data compiled by the blockchain analytics firm Arkham Intelligence. Arkham has labeled the holding as belonging to the notorious North Korean hacking organization Lazarus Group. It’s been alleged by many observers over recent years that Lazarus is controlled by the North Korean government. Photo by Vasilis Chatzopoulos on UnsplashOn this basis, it would appear that North Korea now has a larger Bitcoin holding than the Bitcoin-friendly jurisdictions of Bhutan and El Salvador. The Kingdom of Bhutan holds 10,635 BTC through Druk Holdings and Investments (DHI), the commercial arm of the Royal Government of Bhutan.  Meanwhile, El Salvador holds 6,119 BTC. Bhutan has been accumulating Bitcoin as a consequence of Bitcoin mining activity carried out by the government in partnership with Singapore-based Bitcoin mining firm Bitdeer and others within the Asian country over recent years. El Salvador made a commitment to buy Bitcoin on an ongoing basis following its recognition of the digital asset as legal tender back in 2021. Based on Bitcoin pricing at the time of writing, Arkham’s data suggests that North Korea currently holds Bitcoin with an overall value of around $1.14 billion. It’s believed that North Korea’s overall holdings have been bumped up recently following a $1.4 billion hack of global crypto exchange Bybit last month. According to crypto data analysis firm Coin Metrics, the hack stands as one of the largest of all time.  Arkham’s data suggests that North Korea now has the third largest nation-state holding of Bitcoin, with the U.S. in first place, with 198,109 BTC, and the UK next with a holding of 61,245 BTC. Besides Bitcoin, the Lazarus Group is understood to be sitting on ETH, BNB, DAI and BUSD worth in the region of $30 million. In the immediate aftermath of the hack, the hackers moved to swap out some of the stolen Ether (ETH) for Bitcoin via the THORChain decentralized liquidity protocol. South Korea not building Bitcoin reserveWhile North Korea appears to have accumulated Bitcoin at the nation-state level through nefarious means, the Republic of Korea’s (South Korea) central bank has given an indication that it currently has no plans to accumulate Bitcoin.  According to a recent local media report, the Bank of Korea (BOK) responded in writing to a query from a Korean parliamentarian, outlining that there is no plan currently to develop a Bitcoin reserve or to stockpile Bitcoin at a national level.  The BOK is understood to have cited Bitcoin’s price volatility as a major concern. Additionally, the central bank outlined that Bitcoin doesn’t conform to the International Monetary Fund’s (IMF) guidelines relative to foreign exchange reserve management.

news
Web3 & Enterprise·

Sep 25, 2023

CityLabs Secures 8.55% Stake in Gopax

CityLabs Secures 8.55% Stake in GopaxCityLabs, a company listed on the KOSDAQ stock exchange, has stepped in as a rescue investor for the South Korean cryptocurrency exchange Gopax.The company announced last Friday that it has acquired a total of 76,308 shares of Streami, the operator of Gopax, securing an 8.55% stake in the company. The investment amounts to a total value of KRW 5.4 billion (approximately $4 million).Photo by Precondo CA on UnsplashGopax’s turbulent historyGopax has recently been facing public and regulatory scrutiny due to its internal struggles, such as undergoing major changes in leadership earlier this year following its acquisition by Binance, with Lee Jun-haeng resigning and Binance’s Asia Pacific Head, Leon Sing Foong, taking over.After this event, Streami submitted reports to the Financial Intelligence Unit (FIU) under the Financial Services Commission (FSS) in line with requirements to inform the regulatory body about such changes. However, due to delays in the FIU’s approval process likely influenced by Binance’s various legal and regulatory challenges, there was yet another leadership transition — Foong stepped down, and Lee Joong-hoon, Gopax’s former Vice President, took over. Notably, Foong recently left Binance altogether amid regulatory crackdowns.During this process, Gopax also struggled to make principal and interest payments on its own decentralized finance (DeFi) service, GOFi, in the wake of last year’s FTX collapse. The amount of customer funds locked in GOFi totals KRW 56.6 billion, according to an announcement made by Gopax in April. Binance acquired a stake in Gopax on the condition that it would inject enough capital into Gopax to repay this amount in full.CityLabs steps inAs a result, there have been speculations that a Korean company would invest in Gopax and deliver the exchange from its woes. Some even predicted that this company might become a major shareholder, although CityLabs has acquired only an 8.55% stake due to the fact that the funds required to do so far exceed CityLabs’ annual revenue.Last year, CityLabs reported a consolidated revenue of KRW 28.4 billion and an operating loss of KRW 6.1 billion. Although its revenue increased by 2% compared to the previous year, operating losses grew by 46.9%. While the company may not have sufficient funds at present to become a major shareholder, there lies the possibility that it may increase its stake in the future.The acquisition seems to be driven by CityLabs’ interest in blockchain businesses and the crypto market. While it currently specializes in intelligent transportation systems (ITS), it was formerly Dayli Blockchain, which was affiliated with the crypto exchange Coinone and Dayli Financial Group (now known as Gowid). In 2017, Yellow Mobile became the largest shareholder of Dayli Financial, and in February 2018, it became the largest shareholder of DailyBlockchain, making Dayli Blockchain its subsidiary. Coinone was also a subsidiary of Yellow Mobile at the time. All of these ownership relations have now been restructured.CityLabs has thus been involved in the blockchain industry for some time now with previous connections to cryptocurrency exchanges while also offering decentralized identity (DID) and blockchain as a service (BaaS) products. Observations point to the possibility that its history has influenced its decision to invest in Gopax.“We acquired shares to secure an entry point into the crypto market and position ourselves as a major player,” the company said in a statement.Meanwhile, financial authorities are considering plans to examine the eligibility of major shareholders when reviewing applications from crypto businesses.

news
Web3 & Enterprise·

Jan 13, 2024

Telcoin makes users whole in exploit recovery

Singapore-regulated Telcoin, a developer of financial applications for mobile users, has successfully restored user balances following an exploit that saw approximately $1.2 million worth of funds transferred from affected accounts.Photo by Martin Sanchez on UnsplashUnauthorized withdrawal of assetsThe incident, which occurred in late December, was attributed to an error in the interaction between Telcoin's digital wallet and a proxy contract on Polygon. In a blog post which was published on Wednesday, the company shared a full post-mortem analysis report which it commissioned Hong Kong-based blockchain security firm BlockSec to carry out, relative to the exploit. The fault in the proxy contract's implementation caused a technical conflict that allowed for the unauthorized withdrawal of assets. Fortunately, no admin keys were compromised, ensuring that the broader Telcoin ecosystem remained unaffected. In response to the security breach, Telcoin took action by immediately freezing the use of its application as a precautionary measure. The team initiated an investigation and committed to releasing updates promptly to address the issue and restore normalcy. The identified address associated with the exploit was 0x35d2775e5f95596509951b140d68fc5b9185ff98. TEL token freefallDespite the initial market turbulence, with the price of the Telcoin (TEL) token plummeting, the cryptocurrency has demonstrated resilience. On Dec. 25, TEL fell from a peak price of $0.00235146 to $0.00122535, representing a 48% decrease. At the time of writing, the price has slightly rebounded, trading at $0.001335. Nevertheless, it's still down 40% over the course of the past month's trading. In a social media direct message to CoinDesk recently, Telcoin's founder and CEO, Paul Neuner, expressed pride in how his team responded to the issue, stating: “Making the decision to preemptively restore affected user wallets from our company treasury was a no-brainer, and I’m proud of the team for making that happen in record time.” Regulatory standingTelcoin's regulatory standing played a crucial role in instilling confidence during this challenging time. Although headquartered in Tokyo, the company is regulated in Singapore as a Major Payment Institution (MPI) by the Monetary Authority of Singapore (MAS). The firm is also registered and regulated in other global markets, including Canada and Australia. Telcoin maintains offices in Singapore, Tokyo, Dubai and Los Angeles. The company had been active in trying to shape regulation in the United States in 2023, with company executives having made repeated visits to Washington D.C. to meet with Financial Services Committee members and staffers on Capitol Hill. In April of last year, the company extended its service offering to the European market, starting out initially in Lithuania.It appears that the restoration of Telcoin's application services led to a significant boost in user confidence. The company reported a 400% increase in deposits compared to the previous month. Users responded favorably to Telcoin's swift resolution of the security breach, with a ratio of $3.60 being deposited for every $1 withdrawn in the first day since the service restoration. Telcoin's measures, collaboration with security experts and the surge in user deposits appear to have resulted in a resilient recovery. The saga highlights the importance of prompt and transparent responses in maintaining trust in the face of crypto security issues.  

news
Loading