{"id":983,"date":"2024-10-25T12:33:51","date_gmt":"2024-10-25T18:33:51","guid":{"rendered":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/?p=983"},"modified":"2024-10-25T12:33:54","modified_gmt":"2024-10-25T18:33:54","slug":"44-million-stolen-from-crypto-platform-in-singapore-a-growing-concern-for-cryptocurrency-security","status":"publish","type":"post","link":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/2024\/10\/25\/44-million-stolen-from-crypto-platform-in-singapore-a-growing-concern-for-cryptocurrency-security\/","title":{"rendered":"$44 Million Stolen from Crypto Platform in Singapore: A Growing Concern for Cryptocurrency Security"},"content":{"rendered":"\n

The fast-evolving world of cryptocurrencies continues to be plagued by security concerns, as demonstrated by the recent theft of $44 million from a Singapore-based cryptocurrency platform, BingX. BingX confirmed that on September 20th,2024. They detected abnormal network access, potentially indicating an attack on BingX’s hot wallet. The crypto platform discovered the illicit movements of funds on Thursday night, shortly before BingX announced a shutdown for \u201cwallet maintenance\u201d on social media and their official website as well [1].<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Source from X [2].<\/p>\n\n\n\n

The Incident<\/strong><\/h4>\n\n\n\n

According to reports, the hackers managed to penetrate the platform and siphoned off significant amounts of funds, impacting users globally. BingX serves a substantial number of clients, and the breach has caused concerns over the safety of digital currencies stored on centralized exchanges. Although efforts are underway to track and recover the stolen assets, the perpetrators remain unidentified, raising questions about the vulnerability of digital financial ecosystems.<\/p>\n\n\n\n

Millions began to flow out from the platform and this activity came to the attention of the blockchain security firms on Thursday night even before BingX posted a message on social media about a shutdown related to \u201cwallet maintenance\u201d [3]. The company later released a longer statement saying the disruption was triggered after the company \u201cdetected abnormal network access, potentially indicating a hacker attack on BingX’s hot wallet.\u201d [4]<\/p>\n\n\n\n

According to BingX, \u201cWe immediately implemented emergency measures, including urgent transfer of assets and a temporary suspension of withdrawals. There has been minor asset loss, but the amount is small and is currently being calculated\u201d.[4] <\/p>\n\n\n\n

Nonetheless, it was pointed out by observers that the outflows cannot be classified as \u201cminor losses\u201d in any circumstances. As stated by Bitrace, a blockchain intelligence company, over $43.5 million worth of cryptocurrency has been transferred from three addresses that belong to BingX without authorization[5].<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Source from X [6].<\/p>\n\n\n\n

The firm subsequently published an enhanced audit with assistance from the blockchain security company SlowMist which said so far they have tracked about $44.7 million in losses [6].<\/p>\n\n\n\n

Match Systems, another blockchain security firm claimed that due to the breach, assets worth more than $48 million were stolen from 9 crypto wallets. BingX later admitted they are still calculating how much was taken [7]. <\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Source from X [7].<\/p>\n\n\n\n

Vivien Lin, Chief Product Officer at BingX, also stated that they are still assessing the extent of the losses. While reassuring users that the operations of the platform were not impacted by the cyber attack and that the financial impact was borne by their capital reserves.<\/p>\n\n\n\n

“We hope all platforms to unite in fighting hackers by sharing and publicizing confirmed hacker addresses. By doing so, we can deter and punish malicious behavior in advance,” Lin shared in a post on X [8].<\/p>\n\n\n\n

In an effort to recover the stolen funds, BingX extended a generous bounty offer to the hacker, according to Bitrace. The company sent a message offering a 10% reward for the return of the assets. BingX added that if the hacker complied, they would stop all tracking, data collection, and analysis efforts. However, failure to cooperate would result in continued investigations with the FBI, local law enforcement, and the broader community to enforce actions and recover the full amount [9].<\/p>\n\n\n\n

Since then, BingX has been following up on the hackers\u2019 wallet addresses and the movement of funds on them. Following the attack, withdrawals were restored on September 21, with deposits resuming a day later. The company emphasized that a large proportion of its assets are still held in cold storage, with only a minimal amount kept in hot wallets to facilitate withdrawal demands.<\/p>\n\n\n\n

A Broader Pattern of Crypto Thefts<\/strong><\/h4>\n\n\n\n

This incident is not isolated, but it is part of the disturbing experiences in the cryptocurrency industry where there have been hacks and cyberattacks on exchanges and wallets resulting in billions of dollars of losses. Although there are improvements in blockchain technology and even security protocols, the presence of adversaries holds the possibility of new exploitations to be developed to either technology flaws or human shortcomings.<\/p>\n\n\n\n

Implications for Information Security and Privacy<\/strong><\/h4>\n\n\n\n

This incident emphasizes the need for additional cybersecurity safeguards in the cryptocurrency domain. Cryptocurrency platforms do not enjoy regulatory safeguards or asset-insured deposits unlike traditional banks do, thus users are vulnerable at the time of the attack.<\/p>\n\n\n\n

Key security concerns include:<\/p>\n\n\n\n