Skip to main content

Liquid Exchange falls victim to a crypto hack

 


Once again, hackers manage to divert crypto assets in the upper double-digit million range from hot wallets on an exchange. This time it hits the Singapore exchange Liquid.

Yesterday evening, August 18th, hackers managed a million dollar coup. As the official account of the Liquid Exchange admitted this morning around 4 a.m. via Twitter, thieves were able to steal various crypto assets such as Bitcoin (BTC), Ether (ETH), Tron (TRX) and XRP from wallets on the Exchange. The affected wallets are said to have exclusively been so-called hot wallets, i.e. online wallets which, in contrast to cold wallets, are significantly more susceptible to hacking attacks.


Liquid does not reveal how great the damage is. The Exchange does not provide any figures when asked. However, the addresses to which the hackers transferred the crypto assets are known:

It doesn't require any in-depth forensic skills to appreciate the value of the prey. The Bitcoin address currently has a total of 107.4 BTC with a total value of 4.8 million US dollars. Since the first entry to this address took place yesterday evening at the presumed time of the hack, it can be assumed that it is the stolen property.

Hackers get 107 BTC into their hands

The first inbound transaction also made up the bulk of the Bitcoin loot. The transaction was part of block 696418 , which was mined on August 18th at 10:04 pm. In this block alone, the hackers had transferred a total of 63 BTC, divided into 51 smaller transactions.


The stolen BTC is, however, a small item compared to the ether loot. Because with 14,944 ETH the thieves were able to withdraw an incredible 44.7 million US dollars in ETH from addresses on the Exchange. Of this, US $ 24 million comes from tokens such as Anchor (ANCT) or XENO NFT HUB (XNO).


Investigating the stealing TRX and XRP is a lot more difficult because the attackers split their loot among different addresses shortly after the hack. Various media reports unanimously that XRP and TRX worth around 10 million US dollars could be stolen.

In total, the damage amounts to at least 60 million US dollars. Since the crypto assets have been stolen from hot wallets on the Exchange, some customers might experience a rude awakening the next time they log in. At this point in time, it is still unclear whether the injured party will be compensated for their loss. Even when asked, Liquid did not comment on such intentions.

Stock exchanges remain uncertain

Since exchanges are repeatedly becoming victims of hacking, it is advisable to think about self-managed custody, also known as self-custody. Hardware wallets are particularly suitable for this, as they have no connection points with the Internet and are therefore much more secure than hot wallets. 


My Top Picks
Honeygain - Passive earner that pays in BTC or PayPal
BetFury - Stack BFG for daily dividends - Play smart!
Pipeflare - Faucet that pays in ZCash and Doge, Games pay in DAI
Womplay - Mobile dApp gaming platform that rewards in EOS
Cointiply - The #1 Crypto Earning Site
LiteCoinPay - The #1 FaucetPay earner for Litecoin 
Upland - Collect Digital Properties & Test Your Skills
Publish0X - Earn Money By Writing and Reading Articles!
LBRY/Odysee - YouTube Alternative that lets you earn Money by viewing videos!

FaucetPay - The #1 Microwallet Platform
FREEBTC - The #1 FaucetPay earner for Satoshi's
FaucetCrypto - An earning/faucet site that pays out instantly
FireFaucet - An earning site that pays better for some than Cointiply
DogeFaucet - Dogecoin Faucet
xFaucet - BTC, ETH, LTC, Doge, Dash, Tron, DGB, BCH, BNB, ZEC, FEY - Claim every 5 minutes
Konstantinova - BTC, ETH, LTC, Doge, Dash, Tron, DGB, BCH, BNB, ZEC, USDT, FEY, 25 Claims Daily

Comments

Popular posts from this blog

From offchain to offchain: Statechains meets Lightning

  Without a doubt, the most significant off-chain Bitcoin solution is the Lightning network. But in its wake, the statechain has emerged as an intriguing replacement. There is currently a proposal to link the two offchain networks. From an ocean, for example, you can see sunbeams glistening in the water, waves rippling, and possibly a jellyfish drifting toward the light. But you only see a small portion of it. The distance from the sea's surface to its bottom is hundreds of meters. It has dozens of different fish species swimming in it, crabs and starfish crawling on the bottom, shells clinging to rocks, and sea plants climbing up. A completely new world starts where your gaze diverges. You can picture a blockchain like Bitcoin, just like the sea. What you see on the outside is only a small portion of what is actually there; the set of UTXOs (coins) and transaction history that full nodes store are just the beginning of a much larger world. It's the plan, at least. With Bitcoin

MSP Recovery and Tokenology aim to optimize healthcare with the help of Polygon

  MSP Recovery LLC, a Miami, US-based healthcare provider with an estimated enterprise value of $32.6 billion, is partnering with Web3 company Tokenology to jointly launch a new blockchain platform called Lifechain. Lifechain wants to leverage the verifiable and transparent nature of blockchain technology to aggregate medical care claims, medical expense reports and patient data and streamline their processing. For this purpose, MSP Recovery launched its own LifeWallet in January, which already has 1 million users. In addition to the wallet and blockchain platform, an associated crypto token called LifeCoin is also used. The press release explains that the primary purpose of the system is to enable secondary healthcare providers to more effectively bill health insurance companies for their costs. “The number of medical claims tokenized going forward will surpass $50 million per day by 2024. For this we need scalability, security and sustainability, which we have only found with Polygon

Phishing attack on popular crypto sites tries to empty wallets

  Several major crypto sites such as Etherscan, CoinGecko, DeFi Pulse, and others report malicious pop-ups scammers use to try to trick users into connecting their MetaMask wallets. The phishing attack came from a domain displaying the Bored Ape Yacht Club (BAYC) logo. "We are investigating the root cause of this attack to fix the threat as soon as possible," CoinGecko founder Bobby Ong tweeted. The phishing attack appears to have been triggered by a malicious ad script from Coinzilla, a crypto ad network, according to CoinGecko. Etherscan also advises its users not to confirm any transactions that may appear on the website. The attackers attempted to use the hype around the “bored monkeys” non-fungible tokens (NFT) to gain access to the cryptocurrencies of unsuspecting website visitors. Although the websites affected by the scam attempt have reacted in the last few hours and deactivated the advertising pop-up, it is still recommended not to connect your MetaMask wallet to ne