Top

HTX and Heco Chain exploited with $115 million loss

Policy & Regulation·November 24, 2023, 2:14 AM

Seychelles-incorporated cryptocurrency exchange HTX, linked to digital-asset entrepreneur Justin Sun, has fallen victim to a significant hack, only a few months after having suffered another hack in September.

Photo by Markus Spiske on Unsplash

 

Second HTX hack in recent months

The last hack, involving a loss of digital assets to the value of $8 million, was resolved when the hacker agreed to return funds in October in return for a goodwill payment of around $400,000.

This latest unfortunate incident follows another hack on Poloniex, also associated with Sun, just weeks ago. Sun acknowledged the HTX hack in a tweet, announcing the temporary suspension of deposits and withdrawals without specifying the exact amount pilfered.

 

Separate Heco Chain hack

It is understood that approximately $30 million worth of cryptocurrencies was siphoned from the exchange wallet. The platform is actively investigating the breach, aiming to uncover the specifics surrounding the attack. Simultaneously, the HECO Bridge, which was established by HTX for cost-effective fund transfers across different blockchains, experienced a separate hack.

This breach resulted in losses exceeding $85 million, including ETH, US dollar stablecoin Tether (USDT) and various other tokens. Although initially launched by HTX, HECO operates independently from the HTX exchange.

 

Crypto community concern

These security breaches cast a shadow over Sun’s crypto ventures, especially considering the recent hack on Poloniex, which saw losses surpassing $100 million in various cryptocurrencies. A spokesperson for crypto security firm Hacken told Cointelegraph that these hacks could be the work of an insider.

“We can see that all these attacks have the same target: Justin Sun’s projects,” the spokesperson stated. These related incidents are the cause of significant speculation within the crypto space, with some concern expressed about the financial health of HTX, given that the firm is currently offering unsustainable interest rates of up to 100% APY on a selection of digital assets.

In response to the HTX hack, Justin Sun assured the community in a post on X (formerly Twitter) that HTX would fully compensate for the losses incurred in its hot wallet. The exchange has temporarily halted deposits and withdrawals as the investigation unfolds. Sun emphasized the commitment to resume services once the investigation concludes and the cause of the breach is identified.

These incidents raise questions about the security infrastructure of platforms associated with Justin Sun. The crypto community awaits further details on the investigation’s outcomes and preventive measures that will be implemented to fortify these exchanges against future attacks.

Such recent security breaches have not just affected Justin Sun-related enterprises. Earlier this month, decentralized exchange (DEX) KyberSwap was exploited to the tune of $46.5 million. Earlier this week, Kronos Research — a Taipei-based crypto trading, market making and venture capital platform — experienced a $25.6 million loss. The past twenty days have seen five major hacks resulting in an aggregate loss of a staggering $290 million.

As the crypto industry grapples with increasing security challenges, the importance of robust protective measures cannot be overstated. These developments underscore the need for a cautious and diligent approach in safeguarding digital assets within the rapidly evolving cryptocurrency landscape.

More to Read
View All
Web3 & Enterprise·

May 09, 2023

Artifact Labs Raises $3.25M

Artifact Labs Raises $3.25MArtifact Labs, a Hong Kong-based start-up company that concerns itself with Web3 and metaverse products from leading brands, has raised $3.25 million in a recent funding round.Photo by Pixabay on PexelsThe NFT-focused company, which was spun out of Hong Kong’s South China Morning Post (SCMP) in 2022, has received funding from Blue Pool Capital and Animoca Ventures, with Blue Pool leading the funding round. Blue Pool Capital is the investment vehicle of Alibaba founders Jack Ma and Joe Tsai.The company was borne out of a decision taken by the SCMP in 2021 to launch an NFT standard called artifact, which was geared toward recording historical data. Its starting point in that endeavor was the sale of NFTs of its very own historical front pages. That included iconic historical snapshots such as the return of Hong Kong to the Chinese in 1997, the outbreak of avian flu, the onset of the Asian financial crisis and the death of the UK's Princess Diana in 1997.Expansion of operationsArtifact Labs has said that it intends to use the funding to expand company operations. Executing on that, the firm intends to fill multiple developer positions.Phillip Pon, CEO of Artifact Labs commented on the development via a press release:“It’s not about creating new IPs for speculation — for example NFT hype projects — it’s about driving new engagement with historically significant collections by using Web3. We want to carve new space in the younger public’s consciousness for historical brands and artifacts, while supporting these important organizations with new revenue streams to fund their preservation work, we are also solidifying immutable on-chain data preservation through NFTs.”It appears that the firm will release NFT collections on behalf of preservation organizations, while at the same time developing technology to assist institutions in preserving their archives on the blockchain.NFTs with inherent valueLast year, Artifact Labs Founder and former CEO of the SCMP, Gary Liu, said in an interview that NFTs need to contain a certain inherent value beyond just being endorsed by a number of people. Liu stated: “There has to be intrinsic value in the asset itself or the underlying asset that it represents. That’s what is going to drive NFT innovation.”That philosophy is borne out by one of Artifact’s recent collaborations. In February, the firm partnered with RMS Titanic, Inc, a company that’s dedicated to preserving the legacy of the infamous sunken ship. Central to the partnership was an intention to mint NFTs based upon over 5,500 artifacts that have been recovered from the sunken wreckage.In January Artifact Labs partnered with Dubai-based data intelligence and marketing technology firm, MEmob+. The objective of the firms in teaming up is to have the complete range of expertise necessary between them in order to offer brands and companies a strategic advisory service when it comes to delving into the metaverse. Artifact’s art platform Materia, will be harnessed by MEmob+ to assist brands who want to develop art projects in the metaverse.

news
Web3 & Enterprise·

Oct 18, 2023

Scroll’s zkEVM Launches on Ethereum Mainnet

Scroll’s zkEVM Launches on Ethereum MainnetScroll, the Seychelles-headquartered project behind the Ethereum layer-2 network of the same name, has officially made its debut on the Ethereum mainnet.Photo by Zoltan Tasi on UnsplashAttempting to solve for scalabilityThe project team announced the development via a press release which was published on Tuesday. The network launch signifies the latest in a series of attempts by various layer-2 projects, including Polygon and StarkWare, to address the persistent challenges of high transaction fees and network congestion that have hindered Ethereum’s usability in recent times. Speaking to layer-2 development, co-founder Sandy Peng stated:“We see a future where the vast majority of value transfer takes place on Layer 2s on Ethereum. What will drive that adoption is improved user and developer experience.”After testing and refinement on its testnet, Scroll believes that it is in a good position to play an active role within the Ethereum ecosystem by providing a general-purpose, zero-knowledge Ethereum virtual machine (zkEVM) roll-up.The project has 900,000 wallet addresses in active use on its testnet, having executed seven million transactions since August. The testnet has seen over 55 million transactions during its year-long operation.At its core, Scroll’s mission is to combine Ethereum’s network security with reduced fees and lower latency, making it an attractive proposition for existing Ethereum projects. According to Peng, Ethereum developers can seamlessly deploy their projects on Scroll and harness the groundbreaking zkEVM technology.Incorporating bytecodePeng emphasized the significance of zkEVM’s ability to batch proofs efficiently, resulting in faster transaction speeds and cost reductions, thanks to its bytecode-level compatibility.Bytecode, in the realm of computer programming, simplifies intricate machine cryptography, making code more accessible for computer hardware. Scroll allows deployed smart contracts to store the bytecode of their transactions, which is then sent to a centralized zkEVM node. This node verifies the transaction’s accuracy without revealing its content. Once verified, the transaction’s status is updated on the Ethereum network, eliminating the need for re-execution. Peng pointed out:“Thanks to this feature, Ethereum devs can leverage all the same tools they are familiar with, ensuring that everything operates seamlessly right from the start.”Scroll’s mainnet code was subject to audits conducted by four major auditing firms, namely Zellic, Trail of Bits, OpenZeppelin, and KALOS, in an effort to ensure robust security and reliability.Efforts towards greater decentralizationWhile Scroll’s current implementation offers compelling features, the team is actively researching ways to further enhance the network’s decentralization. Currently, if the sequencer goes offline, the protocol halts, creating a potential vulnerability. To address this, the Scroll team is working on a protocol upgrade that will enable “forced batches.” This update will allow permissionless publication of batches through the base layer, even in the event of a sequencer halt.Peng elaborated on the team’s vision, stating: “Mid-term, the goal is to minimize the probability of a sequencer halt through decentralization.” This approach aims to bolster the network’s resilience and ensure a smoother user experience.While headquartered in the Seychelles, the project has its origins in China through its Chinese founders, Ye Zhang and Haichen Shen, alongside Peng, with many of its 60-strong project team based in mainland China and Hong Kong.

news
Policy & Regulation·

Apr 08, 2025

Hong Kong establishes rules to enable crypto staking

Hong Kong regulator, the Securities and Futures Commission (SFC), has established guidelines for crypto staking service providers. That’s according to a statement published by the SFC to its website on April 7. The guidance is aimed at licensed virtual asset trading platforms (VATPs) and SFC-authorized funds with exposure to digital assets.Photo by Markus Winkler on UnsplashExpanding service offeringThe regulator points out that the guidance on staking falls in line with its recently announced “ASPIRe” roadmap, which is geared towards ensuring that the Chinese autonomous territory remains relevant in its efforts to maintain its status as a global hub for crypto businesses. Expanding product and service offerings within the crypto sector was one of the five pillars of that plan. Smoothing the way for the offering of staking works towards fulfilling that aspect of the ASPIRe plan. Written approvalIn this guidance, the SFC sets out that licensed service providers must obtain written approval from the regulator before any such product can be offered to investors in Hong Kong. That stipulation applies to both VATPs and authorized funds with digital asset exposure. Additionally, VATPs must retain control over staked assets, with no delegation in the custody of such assets to third parties permitted. In the case of authorized funds that include crypto assets, they must stake virtual asset holdings through licensed VATPs and other authorized institutions. Required disclosuresThe regulator has also stipulated that certain disclosures must be made by licensed exchanges to potential customers in respect of staking products. These include the disclosure of all associated risks, full transparency with regard to fees, minimum lock-up periods and custodial arrangements. Commenting on the provision of this guidance, SFC CEO Julia Leung said that the provision of a greater range of regulated services and products is crucial in order to sustain continued growth of Hong Kong’s virtual asset ecosystem. However, she added that any broadening of the range of services offered “must be done in a regulated environment where the safety of client virtual assets continues to be front and centre of the compliance framework for offering such service.”   The SFC outlined that it recognizes “the potential benefits of staking in enhancing the security of blockchain networks and allowing investors to earn yields on virtual assets within a regulated market environment.” The authorities in Hong Kong are not the only ones who recognize the benefits that the incorporation of staking within crypto investment products can bring. Last month, Robert Mitchnick, head of digital assets at the world’s largest asset manager, BlackRock, told the Digital Assets Summit in New York that Ether ETFs would benefit from the addition of staking.  Mitchnick suggested that the current inability to earn a staking yield within such products is a key limitation. He outlined that such a change is dependent upon relevant regulatory changes being implemented in the U.S. A more crypto-friendly climate in the U.S. since U.S. President Donald Trump took office has resulted in various lawsuits being dropped against companies like Coinbase related to the staking services that had been offered. A number of U.S. Ether ETF issuers, including Franklin Templeton, Grayscale and Bitwise, have put forward proposals to the Securities and Exchange Commission (SEC) to have staking included in these products.

news
Loading