Top

Crypto Exchange HTX Reports $8 Million Hack Over Weekend

Web3 & Enterprise·September 27, 2023, 12:43 AM

Crypto exchange HTX confirmed on Monday that it fell victim to a hack over the weekend, resulting in losses amounting to 5,000 ETH ($8 million).

HTX stakeholder Justin Sun, Founder of layer one blockchain TRON, disclosed the breach via an X post. In a series of subsequent X posts, Sun assured users and stakeholders that the exchange had promptly covered the losses, and current user deposits remained secure. He also emphasized that the platform was operating normally despite the security incident.

Photo by GuerrillaBuzz on Unsplash

 

Hacker incentive

The TRON Founder also extended an offer to the hacker responsible for the breach. He proposed a 5% reward for the return of the remaining funds, a figure notably lower than the 10% often offered to hackers in similar situations. Additionally, Sun dangled the possibility of a job at the exchange. That’s an unusual response to a cryptocurrency hack and one that had one commentator speculating upon the notion that the hacker belonged to the notorious North Korean Lazarus hacking group, pondering the prudence of such a move.

Data from DeFi data aggregator DeFiLlama revealed that Seychelles-based HTX, formerly known as Huobi, witnessed nearly $10 million in outflows, with a remaining $2.73 million in customer deposits as of the latest data.

 

Hacker’s identity may be known

The hacker, who received a series of messages from an address identified as an HTX hot wallet by Nansen, was presented with a stark choice. The messages, written in both English and simplified Chinese, claimed to have uncovered the hacker’s true identity and urged the return of the stolen funds to the address 0x18709E89BD403F470088aBDAcEbE86CC60dda12e. In return, HTX offered a 5% “white hat bonus” valid until October 2, 2023. If the funds were not returned by that date, law enforcement would be involved, the message warned.

The hack came shortly after Justin Sun shared a promotional video in which he depicted himself defeating a hooded figure symbolizing a hacker “shorting crypto” with a single punch while on a spaceship journey to what appeared to be Mars.

 

Insolvency fears

On Tuesday, Sun outlined that the exchange had established a “SAFU” (Safe Asset Fund for Users) fund for platform users. However, taking to X on Monday, Adam Cochran, Managing Partner at Cinneamhain Ventures, claimed that there was a likelihood that the HTX business is insolvent. Cochran maintains that available data suggests a shortfall in crypto holdings relative to HTX users' assets.

Travis Kling, Founder and Chief Information Officer of Ikigai Asset Management, went one further on X, stating:

”Not “probably”. Huobi is insolvent.”

Kling, a long-time critic of Binance, went on to suggest that if Huobi were to collapse, that event would likely lead to Binance unraveling also.

HTX originated in China and nowadays maintains offices in Singapore, Japan, South Korea, Hong Kong, and the UK. It has long been speculated that Justin Sun has a controlling stake in the HTX business. Sun has denied that assertion, instead suggesting that he is a member of HTX’s “Global Advisory Board.”

More to Read
View All
Web3 & Enterprise·

Jul 04, 2023

Poly Network Exploit Results in Billions of Nonexistent Tokens

Poly Network Exploit Results in Billions of Nonexistent TokensPoly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.Photo by Shubham Dhage on UnsplashNetwork suspensionThe Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.Bridge vulnerabilitiesBridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.Illiquid Metis tokensMetis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

news
Policy & Regulation·

Feb 27, 2024

Korean and U.S. regulators to discuss recognizing NFTs as virtual assets in May

Lee Bok-hyun, the governor of South Korea’s Financial Supervisory Service (FSS), is set to have a meeting with Gary Gensler, the chair of the U.S. Securities and Exchange Commission (SEC), in May. The purpose of their meeting is to discuss whether to classify non-fungible tokens (NFTs) as virtual assets. Currently, NFTs are not seen as virtual assets in Korea, but there is a high likelihood of them being acknowledged as such following the meeting in May, local financial media outlet Edaily reported.Photo by Andrey Metelev on UnsplashLack of definition for NFTsAn NFT is a digital certificate of authenticity that is not fungible or replicable. NFTs tokenize content or assets of various types – from images, music, videos, games and artworks to real-estates – by assigning a unique token ID to them. Many see 2018 as the year NFT technology was first introduced.  Despite its wide range of applications, no legal definition has been made for NFTs. Some view NFTs as technology, and others as virtual assets or securities. The Korean government decided not to recognize NFTs as virtual assets under the Virtual Asset Protection Act (Virtual Asset Act), effective in July. Behind this decision is a perception that NFTs are less likely to pose significant risks to the market, as a large portion of NFTs are now traded by collectors seeking to expand their private collections.  However, NFTs are increasingly seen as speculative destinations by many investors over time, as prices of virtual assets including BTC surge. This shift backs the local movement to recognize NFTs as well as spot bitcoin ETFs as virtual assets. Opposition from NFT businessesBlockchain industry insiders say defining NFTs is of utmost importance, noting that classifying NFTs as virtual assets headfirst could deal a heavy blow to businesses in this sector. One finance insider mentioned that defining NFTs comes down to understanding their purposes and how they are utilized. If NFTs are primarily used for speculative purposes or as currency, they could be recognized as virtual assets, the person said.  The biggest resistance is coming from NFT-related businesses. That is because recognizing NFTs as virtual assets would require these businesses to obtain a virtual asset service provider (VASP) license from the financial authority, which takes significant costs and workforce in the process. A CEO of a blockchain startup, who preferred to remain anonymous, expressed concerns about the possibility of NFTs becoming virtual assets, saying that such recognition would enable NFT transaction tracing, potentially leading to severe violations of human rights. While many industry insiders expect that the financial authorities will bring NFTs under the forthcoming Virtual Asset Act, the FSS stated that no decisions have been made regarding details of the upcoming meeting with the U.S. SEC. 

news
Web3 & Enterprise·

Oct 20, 2023

Korbit Joins Zero-Fee Crypto Trading Trend in South Korea

Korbit Joins Zero-Fee Crypto Trading Trend in South KoreaSouth Korean cryptocurrency exchange Korbit reduced trading fees to zero on October 20 (local time) for all of the cryptocurrencies supported on the platform. This move follows in the footsteps of Bithumb, another Korean exchange that introduced zero-fee trading earlier this month.Photo by Jeremy Perkins on UnsplashNo extra registration requiredKorbit users can now benefit from zero-fee trading immediately, with no special registration required. This arrangement will continue indefinitely until further notice.Market maker incentives continueKorbit’s market maker incentive program will remain in place. Under this program, users earn 0.01% of the transaction value whenever they place an order.Oh Se-jin, CEO of Korbit, underscored the exchange’s commitment to enhancing user satisfaction. He pointed out several initiatives they’ve undertaken, including enhancing the login system, raising the daily Korean won (KRW) deposit and withdrawal limits, and eliminating transaction fees. He further noted that by removing trading fees, they aim to alleviate the cost pressures of crypto trading for their users and breathe new life into the market.

news
Loading