Top

Kronos Research experiences significant cybersecurity breach

Web3 & Enterprise·November 21, 2023, 12:16 AM

Kronos Research, a Taipei-based crypto trading, market making and venture capital firm, has found itself in the crosshairs of a cyber attack.

Photo by FLY:D on Unsplash

 

$25.6 million loss

Hackers gained unauthorized access to the company’s API keys, resulting in losses exceeding $25.6 million spread across various cryptocurrencies, prompting a concern within the crypto community.

The breach was detailed by the company in a social media post on the X platform on Saturday. That post read:

“In the interest of transparency Around 4 hours ago, we experienced unauthorized access of some of our API keys. We paused all trading while we conduct an investigation. Potential losses are not a significant portion of our equity and we aim to resume trading as soon as possible.”

 

On-chain sleuthing

Investigations by crypto community members have followed, led by blockchain researcher ZachXBT. ZachXBT is a well-known anonymous persona in the crypto space, having earned a reputation for uncovering hacks, scams and unethical practices within the crypto sector.

In this instance, ZachXBT uncovered a trail of transactions originating from a Kronos Research account. The meticulous execution of the cyber attack was evident in six transactions involving 2,780 ETH, 2,540 ETH (repeated twice), 2,636 ETH, 4.93 ETH and 2,507.52 ETH, all directed to addresses controlled by the hacker.

Kronos Research has followed up with a tweet thread on X, acknowledging the gravity of the situation and confirming losses of approximately $25.65 million in crypto assets. Despite the alarming figures, the company sought to reassure stakeholders by emphasizing that the losses represent a relatively small fraction of its total equity. In a commendable display of accountability, Kronos Research pledged to absorb all losses internally, shielding its partners from the financial ramifications of the breach.

The Taiwanese firm posted:

“Our team has been working round the clock to minimize the impact and resume trading operations, following a hacking incident that involved unauthorized access to our API Keys.”

 

Implications for Woo X

The operational repercussions were swift and impactful, with Kronos Research opting for a temporary suspension of all trading operations. This decision rippled through to Woo X, the affiliated Taipei-based exchange and liquidity provider created by Kronos, which temporarily blocked specific asset combinations due to liquidity concerns. Importantly, Woo X assured users of the security of their funds and later announced the resumption of spot and perpetual trading.

Looking forward, Kronos Research outlined its intention to resume trading operations in the coming days, contingent on favorable conditions.

The cyber attack on Kronos Research occurred against the backdrop of heightened cybersecurity concerns within the crypto space. According to blockchain security firm Certik, approximately $173 million was lost to crypto attacks in November alone. The Kronos Research breach follows on the heels of Poloniex’s $131 million hack, highlighting the persistent challenges faced by crypto platforms in securing user assets.

More to Read
View All
Policy & Regulation·

Oct 01, 2025

South Korean police boost crypto team in fight against drug trade

South Korea’s National Police Agency will assign all 41 narcotics investigators recruited during the second half of the year to cryptocurrency-related duties, according to News1. The move follows the creation of a dedicated “Virtual Asset Analysis and Investigation Team” aimed at tackling drug offenses that use digital assets. To bolster skills, the agency plans specialist training for investigators from Sept. 29 to Oct. 2. Of the 41 recruits, 11 will staff an analysis unit and 30 will join field investigations. The analysis team, based at the Seoul Metropolitan Police Agency, will handle crypto-related drug cases nationwide, generate intelligence, and support phishing probes involving digital assets. The investigation group will be deployed to five regional headquarters (Seoul, Busan, Incheon, southern Gyeonggi, and southern Gyeongsang) to target illicit crypto payment processors and the money launderers behind them.Photo by Scott Rodgerson on UnsplashLatest crypto seizure in UK drug caseThe push mirrors trends overseas. In the U.K., Devon and Cornwall Police said detectives seized £1.3 million (about $1.76 million) in cryptocurrency from Ryan Coleman, 36, who received a 15-year sentence after admitting to supplying cocaine, ecstasy, cannabis, and ketamine via the dark web. Police indicated the seized assets are expected to fund proactive operations and community initiatives, with half allocated to HM Treasury. Cartels turn to crypto in North AmericaNorth American authorities report similar challenges. In a January 2025 post, blockchain intelligence platform TRM Labs pointed to the growing use of cryptocurrencies by Mexican drug cartels and other transnational groups. It noted that an executive order signed by President Trump earlier this year allows U.S. law enforcement to freeze crypto wallets linked to these organizations. The post also outlined laundering pipelines that rely on Chinese money brokers, who convert U.S. cash into crypto for global transfers or for buying precursor chemicals. The scale of these flows is underscored by TRM’s September 2024 research, which estimated that Chinese drug-precursor manufacturers took in over $26 million in crypto in 2023, a 600% jump from the year before. In the first four months of 2024, receipts nearly doubled year-over-year. Roughly 60% of these payments were made in Bitcoin, 30% in TRON, and 6% in Ethereum. The analysis also noted that U.S. cryptocurrency ATMs transferred more than $170,000 directly to Chinese precursor vendors in 2023, modest in scale but valuable for investigators. Freezing stablecoins and tracing Chinese linksWhile targeted sanctions and blockchain tracing have disrupted parts of the network, traffickers remain agile, TRM noted. It underscored the need for continued vigilance, technological adaptation, and cross-border coordination. Suggested steps include freezing cartel-linked stablecoins, tightening U.S. cash-to-bank laundering controls, and using legal tools like the Patriot Act to trace Chinese firms and accounts involved in laundering. South Korea’s redeployment of personnel reflects this push to align national enforcement with evolving enforcement dynamics. 

news
Markets·

Dec 30, 2023

OKX delisting sparks privacy coin price slump

In a move announced on Friday, OKX, the Seychelles-headquartered cryptocurrency exchange, declared its decision to delist 20 trading pairs by Jan. 5, triggering a notable price fall for major privacy coins such as Monero, Dash and ZCash. The exchange cited that the affected pairs did not align with its listing criteria, though specific details were not disclosed.Photo by Khara Woods on UnsplashPrivacy coin delisting trendWhile OKX did not explicitly articulate the rationale behind this move, industry observers are speculating that it could be part of the exchange’s broader efforts to comply with evolving regulatory measures. Privacy coins have increasingly drawn regulatory scrutiny due to concerns about potential illicit activities within the crypto space. Earlier in the year, Binance had also announced the delisting of several privacy coins to ensure compliance with local laws and regulations. The broader context of regulatory pressures on privacy-focused cryptocurrencies seems to be impacting major exchanges’ decisions. In 2022, Huobi cited regulatory pressures when it took the decision to delist Monero and other privacy coins. Kraken was further ahead of the curve still, delisting Monero for UK customers in November 2021. Downward price actionFollowing OKX’s announcement on Friday, the prices of privacy-focused cryptocurrencies, notably Zcash (ZEC) and Monero (XMR), experienced a decline. The entire sector of “privacy cryptos” has witnessed a 7.1% decrease in overall market capitalization, according to an index of such coins compiled by Malaysian crypto indexing firm CoinGecko. During this period, Monero and Zcash have seen unit price declines of 4.5% and 10.7%, respectively. Other tokens set for delisting, including Dash, Powerpool and Horizen, have recorded declines of up to 14%. OKX has provided guidance to users, advising them to cancel orders related to the affected trading pairs before the delisting date to avoid automatic cancellation, a process that may take 1–3 working days. Concurrently, the exchange has halted deposits for the impacted cryptocurrencies and plans to cease withdrawals by Mar. 5, 2024, affording holders sufficient time to withdraw their assets. However, once the delisting is complete, trading these digital assets on OKX will become impossible. Interestingly, certain privacy coins like MINA continue to be listed on the exchange, experiencing a 7.5% increase following the delisting announcement. It’s crucial to note that OKX’s delisting is not exclusive to privacy tokens, as it also includes other trading pairs associated with digital assets such as Kusama, Flow, Kyber Network and Aragon. The fight for privacySome crypto community members have voiced their concerns on social media, with many fearing that the innovation may be ‘captured’ by the various state authorities over time. However, ex-Monero developer Ricardo Spagni (AKA “Fluffypony”) was nonchalant about the whole thing, judging by his comments. In a post on social media platform X, he wrote: ”Monero users and contributors literally couldn’t care less about delistings at this point.” As the regulatory landscape evolves, cryptocurrency exchanges are navigating these challenges, impacting the availability and value of specific tokens on their platforms. Investors and privacy advocates alike will be closely watching how such regulatory compliance measures continue to shape the crypto market and crypto use.  

news
Web3 & Enterprise·

Jan 24, 2024

OKX and HashKey plan partnership to promote industry development

HashKey Group, the Hong Kong-based regulated cryptocurrency exchange, is planning a partnership with crypto derivatives platform OKX.Photo by Ivan Lau on UnsplashAdvancing innovation and growthThe duo announced their plans via a press release which was published on Tuesday. The objective of the partnership is aimed at advancing compliant virtual asset innovation and industry growth in Hong Kong. The collaboration between HashKey Group and OKX capitalizes on the strengths and resources of both entities to elevate services and experiences. Harnessing these strengths the pair intend to contribute towards Hong Kong's emergence as a hub for the regulated virtual asset industry. The partnership will encompass various industry initiatives, including blockchain infrastructure development, product diversification and virtual asset investment education within the region. First regulated exchangeNotably, HashKey Group achieved a significant milestone last year by becoming the first Hong Kong Securities and Futures Commission (SFC)-regulated crypto exchange authorized to serve retail users. The firm secured Type 1 and Type 7 licenses from the SFC, in line with the  "compliance first” approach the company is taking. Founded in 2018 and headquartered in Hong Kong, with operations in Singapore and Tokyo, HashKey Group caters to a diverse clientele, including retail investors, institutions, family offices, funds and professional investors. The services offered by the company encompass a Hong Kong SFC-regulated virtual asset exchange, global asset management and wealth management, with a focus on blockchain and digital assets, blockchain node validation, tokenization and Web3 incubation and community operations. Its Singaporean subsidiary, digital asset fund manager HashKey Capital, secured a regulatory license from the Monetary Authority of Singapore (MAS) in December. Unicorn statusOKX Ventures, the investment division of OKX, played a crucial role in supporting HashKey's Series A financing. That Series A funding round saw HashKey achieve unicorn status with a $1.2 billion valuation earlier this month. OKX Ventures focuses on investing in projects that nurture sustainable growth within the global virtual asset ecosystem. OKX, already serving over 50 million users worldwide, has a notable presence with sponsorships that include Manchester City FC in the English Premier League (EPL) and the McLaren Formula 1 racing team. Earlier this month, the company expanded its sponsorship with McLaren. The digital asset exchange began onboarding customers in Hong Kong a month before officially launching operations there, aligning with the city's new virtual asset service providers (VASPs) regime implemented on June 1 of last year. In March 2023, OKX established a Hong Kong entity to launch virtual asset services, with plans to apply for the virtual asset service provider (VASP) license and Type 1 & 7 licenses under the Securities and Futures Ordinance. Approval is anticipated by early 2024. The collaborative effort between HashKey Group and OKX marks a significant stride in advancing compliant virtual asset innovations in Hong Kong. This partnership aims to enhance service offerings and customer experiences, further solidifying Hong Kong's position as a regulated virtual asset industry hub. By leveraging their respective strengths, these industry leaders are well placed to assist in elevating Hong Kong's standing in the global virtual asset landscape, fostering growth and compliance in this rapidly evolving sector.  

news
Loading