1. Home
  2. Exchange

Exchange

CoinEx hack – compromised private keys led to $70M theft

CoinEx confirms that compromised private keys gave hackers access to hot wallets, leading to $70 million hack.

Hong Kong-based cryptocurrency exchange CoinEx has revealed that compromised private keys allowed hackers to steal over $70 million of tokens, while the team looks to open lines of communication to claw back funds.

CoinEx representatives unpacked the finer details of their continuing investigation to Cointelegraph as the team works to build and deploy a new wallet architecture to restore impacted users and functionality of the platform.

Despite an estimated $70 million worth of cryptocurrency being stolen from the platform, the exchange claims this amount represents a small percentage of its total assets under management. CoinEx stated that affected users will be compensated entirely for any lost funds.

CoinEx said that it was still investigating the identity of those responsible for the security breach, which handful of blockchain security firms are attributing to to North Korean “Lazarus Group” hackers.

“Additionally, we have opened communication channels to the hackers in hopes of proactive engagement toward a mutually agreeable resolution.”

The exchange explained that a preliminary investigation pinned the root cause to a compromised private key for its hot wallets. These were used to store exchange assets for carrying out deposits and withdrawals.

Related: New York bans CoinEx exchange, seizes $1.7M in crypto assets

CoinEx suspended its withdrawal service to avoid further losses, patched system vulnerabilities and transferred remaining assets from the affected hot wallets. The exchange told Cointelegraph that it expects to resume withdrawals progressively within 7 working days.

“Our team is currently focused on building and deploying an entirely new and robust wallet system to handle activities within the 211 chains and 737 assets.”

As Cointelegraph initially reported, CoinEx first flagged “anomalous withdrawals” from one of its hot wallets on Sept. 12, beginning with a transfer of 4,947 Ether (ETH). The hackers then began to withdraw large amounts of other tokens to the same address.

The value of stolen funds was first estimated at $27 million but has doubled in the week following the incident.

North Korean hackers have preyed on the cryptocurrency space for the past few years and have been responsible for the largest thefts in the space to date. The 2022 Axie Infinity Ronin Bridge hack alone saw over $650 million stolen.

Blockchain analytics firm Chainalysis estimates that North Korean hackers have stolen around $340 million of cryptocurrency in 2023. This number is now expected to rise with attributions made to the CoinEx hack as well a $41 million hack of cryptocurrency gambling platform Stake on Sept. 4.

Magazine: Web3 Gamer: PUBG devs’ Web3 project, Animoca’s $20M raise, Shardbound review

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

JPEX hikes withdrawal fee to almost $1k after Hong Kong watchdog warning

Community members posted reports that the crypto exchange's staff has abandoned their booth at the Token 2049 event in Singapore after the warning.

Crypto exchange JPEX has reportedly increased its withdrawal fee to up to 999 Tether (USDT) after receiving a warning from Hong Kong’s Securities and Futures Commission (SFC). The staff of the exchange has also been reportedly missing from its Token 2049 booth in Singapore. 

On Sept. 13, the SFC, Hong Kong’s crypto watchdog, issued a warning against JPEX for actively promoting its services to the Hong Kong public despite not being licensed or applying for a license to operate in their jurisdiction. According to the SFC, JPEX has marketed itself on its website as a licensed and recognized platform despite being unregulated.

According to the SFC, they've already notified the relevant opinion leaders and over-the-counter stores of their suspicions about the exchange and asked them to cease promoting the exchange's services.

Related: Hong Kong securities regulator issues in-principle approval to HKVAX

Following the SFC’s warnings, reports of JPEX increasing its withdrawal fees to up to 999 USDT have started to circulate online. The move is seemingly to discourage users from withdrawing their funds from the exchange.

Apart from this, community members who attended the Token 2049 event held in Singapore have reported that JPEX’s booth has been abandoned after the warning from the Hong Kong regulator. 

Some members of the community criticized the event for allowing the exchange to market itself as a sponsor of Token 2049, which is one of the biggest crypto events in the country. 

Magazine: Are DAOs overhyped and unworkable? Lessons from the front lines

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

CoinEx exchange suspected of being hacked as $27M worth of crypto moved

A CoinEx hot wallet transferred $27.8 million of various tokens to a wallet with no previous history, leading experts to suspect a cyberattack.

On Sept. 12, crypto exchange CoinEx experienced abnormally large outflows to an address with no prior history, leading security experts to suspect the exchange was hacked. Blockchain security platform Cyvers Alerts has estimated the losses to be approximately $27 million.

At approximately 1:21 p.m. UTC on Sept. 12, a known CoinEx hot wallet transferred around 4,947 Ether (ETH), worth $7.9 million at the time, to Ethereum account 0x8bf8cd7F001D0584F98F53a3d82eD0bA498cC3dE. The receiving account had no prior history before this transaction.

Immediately after this transaction, the CoinEx hot wallet began transferring large amounts of tokens to the same address. Approximately 408,741 DAI stablecoin, 2.7 million Graph (GRT) tokens, 29,158 Uniswap (UNI) tokens, and many other tokens were transferred from the wallet.

Blockchain security firm PeckShield reported the outflow as “suspicious.” CryptoQuant head of research Julio Moreno also claimed that the behavior of the CoinEx wallet was "strange" as Ether reserves "are now basically zero ETH."

At the time of publication, Coinx has not made a public statement about the incident.

This is a developing story, and further information will be added as it becomes available.

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

Top Binance execs in Russia leave as firm considers exiting the market

Binance VP Eastern Europe Gleb Kostarev and CIS director Vladimir Smerkis have announced they have quit the company.

Cryptocurrency exchange Binance is losing two key executives related to the Russian market amid major regulatory challenges related to sanctions.

Gleb Kostarev, head of Eastern Europe and Russia at Binance, took to Facebook on Sept. 6 to announce his departure from Binance.

In his Russian-language announcement, Kostarev said that today marks the last day of his long-running work at Binance. He added that he’s stepping down as vice president responsible for Eastern Europe, the Commonwealth of Independent States (CIS), Turkey, Australia and New Zealand. He also stepped down from serving the role in the Asia-Pacific region “a few months ago,” the exec added.

Kostarev expressed gratitude to Binance CEO Changpeng “CZ” Zhao and co-founder He Yi for all the opportunities that they provided. “Thanks to all the local initiative teams for their hardcore work and amazing campaigns at the local level,” he noted.

Gleb Kostarev, former head for Asia and Eastern Europe at Binance. Source: Facebook

Vladimir Smerkis, general manager for Russia and CIS at Binance, subsequently announced his departure on Facebook as well. “Almost two years have passed in the blink of an eye, and as of tomorrow, I no longer work at Binance,” the exec wrote.

None of the executives mentioned any straightforward reasons for leaving their positions at Binance. In the announcement, Smerkis promised to tell more about the reasons for the departure, as well as the future and experience at an online or even offline meeting in Moscow in a few weeks.

“I’m going on vacation, which I haven’t seen for almost two years. While you wait, I will spam you with photos of the sea, pizza and sunsets. And advice: leave room for all this in your life,” Smerkis stated.

The Russian cryptocurrency community was quick to react to the latest departures from Binance, with many addressing Kostarev and Smerkis in post comments with the burning question of whether Binance is going to leave the market. In late August, Binance announced it might be considering withdrawing its services from Russia amid Western sanctions.

Binance declined to comment on the implications of the recent layoffs in Russia.

Related: Binance pushes new stablecoin as it confirms plan to cease BUSD support

Should Binance’s exit from Russia take place, the move would apparently have some impact on Binance. According to data from SimilarWeb, Russia is the top market in terms of user visits for the website Binance.com, accounting for 6.3% of total visits.

Binance’s top countries by traffic. Source: SimilarWeb

Binance’s Russian execs announced their leave days after Binance ads were featured in a video by famous Russian YouTuber Yuri Dud, posted on Aug. 16. At the time of writing, the video still includes a text promo of Binance services for Russian users, in addition to an in-video ad shot by the YouTuber.

Apart from the latest departures, Binance has been losing more key executives globally as well. On Sept. 4, Binance head of product Mayur Kamat confirmed he was leaving the crypto exchange after nearly two years. Previously, Binance’s chief strategy officer Patrick Hillmann also left the company in July.

Collect this article as an NFT to preserve this moment in history and show your support for independent journalism in the crypto space.

Magazine: Asia Express: Thailand’s national airdrop, Delio users screwed, Vietnam top crypto country

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

Bitget mandates KYC requirements in line with tightening global regulations

The exchange operator is instituting new KYC requirements for users from September 2023 to comply with developing global regulatory guidelines.

Seychelles-based cryptocurrency derivatives exchange Bitget is updating its Know Your Customer (KYC) requirements for users to stay in step with global regulatory guidelines. 

According to the company, the new KYC requirements are being instituted to protect user rights and interests, shape a secure cryptocurrency trading environment and comply with regulatory recommendations from various global watchdogs.

BitGet will adjust its KYC verification requirements from September 2023, with newly registered users required to complete level 1 KYC verification to access a variety of Bitget’s services including deposits and trading of cryptocurrencies.

Bitget's updated KYC mandate. Source: Bitget

Users that signed up to the platform before Sept. 1 are required to complete KYC verification by Oct. 1, 2023. The derivatives exchange notes that users that have not completed the process through September will still be able to deposit, withdraw and trade.

However from October onwards users that have not carried out the KYC verification process will be limited to withdrawals, cancel orders, redeem subscriptions and closing positions and will be restricted from being able to create new trading orders.

Related: The Sandbox implements KYC measures for protocol staking

Bitget also noted that it would follow through with KYC procedures to verify customers identities for risk assessment purposes in line with a majority of mainstream financial institutions and regulated organizations.

The Seychelles-based platform is the latest exchange to announce that it would be updating its KYC policy.

KuCoin instituted similar requirements in July 2023, introducing mandatory identity checks for all new users to align with global anti-money laundering (AML) regulations. Users that failed to complete KYC checks are unable to access KuCoin’s services and products. KuCoin users are required to provide their names, ID numbers, ID photo and complete a facial recognition process.

OKX is also requiring users to carry out a KYC process to verify identities, with a similar deadline to Bitget in September. The three step process mirrors that of KuCoin, while users that fail to carry out the verification process would be unable to access OKX’s services from the Sept. 21.

Magazine: ‘Elegant and ass-backward’: Jameson Lopp’s first impression of Bitcoin

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

Coinbase futures approval seen as a major win amid the war on crypto

The recent approval allows Coinbase to join the ranks of major derivative exchanges in the United States, CME, and CBOE.

The approval for America’s largest digital asset exchange, Coinbase, to offer crypto futures to U.S. retail customers is being seen as a major regulatory victory amid a heated battle with the country’s securities regulator.

On Aug. 16, the National Futures Association (NFA) — designated by the U.S. commodities regulator as a registered futures association — granted Coinbase permission to operate a Futures Commission Merchant (FCM) platform.

A loud signal

Some crypto industry commentators see the approval as a significant regulatory victory for Coinbase and crypto, given the U.S. Securities and Exchange Commission has accused the exchange of avoiding the registration of its offerings.

“If I were a judge I'd wonder why somehow [Coinbase] manages to register with the [CFTC] yet the [SEC] claims that Coinbase is unwilling to do the hard work to register," investment management firm Electric Capital founder Avichal Garg wrote in an Aug. 17 tweet.

Former CFTC Commissioner and policy head at a16z, Brian Quintenz, said that “Customers and innovation can both win when a regulator is open to having a constructive dialogue around new technology.”

Meanwhile, Coinbase CEO Brian Armstrong said the approval was a major moment for crypto clarity in the United States.

A response to Coinbase securing futures approval. Source: X/@SMTuffy

The move has also placed Coinbase in a position normally helmed by traditional finance firms.

Institutional exchanges, the Chicago Mercantile Exchange, and the Chicago Board Options Exchange currently offer Bitcoin and Ether futures in the United States. 

Coinbase labeled the move as a “critical milestone,” adding it makes it the first crypto-native company to directly offer traditional spot crypto trading alongside futures products.

Tapping into a massive market

In May, CoinGecko reported that the global crypto derivatives market was worth just under $3 trillion, while Coinbase highlighted that the global crypto derivatives market represents around three-quarters of all trading volumes.

“Since the global crypto derivatives market can be three to four times larger than spot, this approval increases Coinbase’s total addressable market,” Dan Dolev, an analyst at Mizuho Securities, wrote in a Wednesday note, as reported by Barron’s.

Orca Capital's Jeff Sekinger said “Coinbase is set to become a pivotal access point for traders,” adding that its new products will “cater to this demand and provide enhanced exposure and flexibility for investors.”

While CoinShares chief strategy officer Meltem Demirors said it was “exciting times in US crypto markets,” particularly given a pivot toward U.S. trading hours.

Related: Coinbase Derivatives Exchange set to roll out BTC and ETH futures

The firm initially unveiled plans to offer BTC and ETH futures contracts in mid-2022. The new approval will allow Coinbase to offer the crypto futures directly to eligible U.S. retail customers, rather than just institutional clients. The exchange did not specify when it would become available, however.

Company stock (COIN) did not react to the news, dropping 1.56% on the day to reach $77.7 in after-hours trading, however, Coinbase shares are up 130% so far this year.

Cointelegraph reached out to Coinbase for further comments.

Magazine: Hall of Flame: Wolf Of All Streets worries about a world where Bitcoin hits $1M

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

Binance.US solves USD withdrawal issues but warns it won’t last long

“While USD withdrawal remains fully operational on the platform today, we expect our banking partners to discontinue that service in the near future,” said Binance.US.

U.S. crypto exchange Binance.US has informed customers it has resolved its U.S. dollar withdrawal issues after working with its banking partners but warns the relief may not last.

The reportedly independent subsidiary of crypto exchange Binance told customers in a June 22 update that its system remains fully operational and that USD withdrawal requests are expected to go back to their normal five-business-day turnaround.

On June 9, the exchange suspended dollar deposits and notified its customers of an incoming pause to fiat withdrawal channels amid its ongoing battle with the Securities and Exchange Commission.

At the time, it also warned customers that its banking partners were preparing to pause fiat (USD) withdrawal channels as early as June 13, however, that didn't end up coming to pass as yet.

In its most recent statement, Binance.US has encouraged any customers that have a failed withdrawal attempt to resubmit their requests “as our systems remain fully operational,” but cautioned that the relief may not be permanent.

“While USD withdrawal remains fully operational on the platform today, we expect our banking partners to discontinue that service in the near future.”

Binance.US is also encouraging its users “use, withdraw, or convert your USD to a stablecoin to continue crypto-to-crypto trading,” as it transitions to a crypto-only exchange.

Any remaining USD balances held in customer accounts could be converted into Tether (USDT) at a future date, it noted.

The announcement also included details of more USDT trading pairs with ANKR, DAI, DASH, HBAR, ICX, IOTA, RVN, WAVES, XNO, XTZ, and ZIL being added on June 26.

Related: Binance​.US coins trade at premium amid litigation fears, fiat gateway issues

However, it noted that it will remove most “USD Advanced Trading pairs” from the platform on the same date. Of the 150 crypto assets that Binance.US supports, only BTC, ETH, ADA, BNB, LTC, MATIC, SOL, VET, USDC, and USDT will be tradable against the dollar.

The company has also had problems with banking partners in Australia. In May, Bitcoin prices fell to a 20% discount on the Australian branch of Binance when local banking and payments partners suspended their services causing a rush to sell and cash out.

Magazine: US and China try to crush Binance, SBF’s $40M bribe claim

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

FTX bankruptcy will be ‘very expensive’ but there’s a reason: Auditor

The legal fees charged in the first months of FTX’s bankruptcy have been examined by an auditor, who has confirmed the case is “on track to be very expensive.”

Fees charged by the lawyers and the restructuring team working on the bankrupt crypto exchange FTX have topped $200 million in just over seven months, but an independent auditor argues it makes sense, given the mammoth task.

On June 20 the court-appointed fee examiner, Katherine Stadler, filed a 47-page report on the fees charged by the law firms in the roughly three months following FTX’s Nov. 11 bankruptcy and concluded they were not “wholly unreasonable in the moment.”

She remarked on the “largely unregulated financial system” in which FTX operates, adding the case was “remarkable” for the exchange’s “global scope, the complete absence of corporate records, and the non-existence of even the most basic corporate governance.”

Stadler confirmed the team working on FTX had “requested more than $200 million in fees” since its November bankruptcy, adding:

“Notwithstanding the relative scope of the known asset pool, these proceedings appear on track to be very expensive by any measure.”

She gave a glowing review of the FTX restructuring team, saying she was “struck” by those who “sprung into action” to “begin transforming a smoldering heap of wreckage.”

“The fees incurred to date are remarkable, but so is the professionals’ performance.”

“Very few firms could have accomplished what these professionals accomplished in 90 days,” Stadler added.

Charging by the hour

Stadler’s report broke down the fees charged by the law firms in the first weeks after FTX filed for Chapter 11 bankruptcy.

It said hourly rates for the 242 lawyers on the case ranged from $388 to $2,165 and 46 lawyers were on more than $2,000 an hour.

Related: Realtor may have accepted $3M for SBF-linked house in Washington DC

New York-based law firm Sullivan & Cromwell has walked away with the biggest paycheck, having charged around $42 million in fees and expenses over that time.

Consultants Alvarez & Marshal were next in line, pocketing over $28 million in fees and expenses.

Previously, Cointelegraph analyzed the billings of the five firms involved in the proceedings and found they collectively invoiced over $100 million in the first quarter of 2023.

Stadler added some advice, saying “careful stewardship of administrative expenses will translate to a better outcome for creditors” along with a “cost-conscious and cost-effective” Chapter 11 process.

Hall of Flame: Peter McCormack’s Twitter regrets — ‘I can feel myself being a dick’

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

Binance is leaving the Dutch market: Here’s when

Crypto exchange Binance announced its departure from the Netherlands, with users asked to withdraw their funds as soon as possible.

Global cryptocurrency exchange Binance has terminated its services in the Netherlands, making an exit from the Dutch market after a bid to obtain a virtual asset service provider (VASP) license failed.

The termination of services is effective immediately, and no new customers from the Netherlands can open an account with the crypto exchange. From July 17 onwards, existing Dutch customers will only be able to withdraw assets from the Binance platform, and no further purchases, trades or deposits will be possible from today.

Binance claimed it explored many alternative avenues to serve Dutch residents in compliance with local regulations. However, no such avenues offered a path to VASP registration.

The crypto exchange is currently sending out emails to its Dutch customers with comprehensive information about the next steps they need to take with their Binance accounts.

In April 2022, the crypto exchange was slapped with an administrative fine of over $3 million for operating in the country without the required license and registration. At the time, the Dutch central bank claimed that Binance had a large customer base in the country and a significant daily trading volume running into billions, thus the hefty penalty.

Related: The state of crypto in Southern Europe: Malta leads the way

The crypto exchange stressed in its announcement that it is compliant with European Union standards on preventing money laundering and financing of terrorism rules. Binance cited its registration in EU countries such as France, Italy, Spain, Poland, Sweden and Lithuania to showcase its EU compliance.

Binane’s departure from the Dutch market comes within days of its exit plans from Cyprus surfacing. On June 14, the Cyprus Securities and Exchange Commission put Binance Cyprus “under examination for application for deregistration” on its website. At the time, Binance told Cointelegraph that it is focused on fully complying with the new Markets in Crypto-Assets (MiCA) regulations in the next 18 months and is therefore concentrated on the larger EU market.

Magazine: Can you trust crypto exchanges after the collapse of FTX?

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether

Binance CEO CZ responds as data points to billions in exchange outflows

Data analytics platforms have reported billions of dollars in outflows from Binance over the last week, but this can be misinterpreted, argues Changpeng Zhao.

While data suggests that crypto assets have been flowing out of centralized exchanges at an accelerated pace over the last week, Binance CEO Changpeng Zhao argues it may not be as bad as it appears. 

Leading analytics platforms such as Nansen and DefiLlama have all measured increased exchange outflows from Binance over the past seven days after news of the Securities and Exchange Commission’s lawsuit against the firm hit the airwaves.

According to Nansen, there has been a net outflow of $2.36 billion from Binance over the past seven days, along with $123.7 million flowing out of Binance.US.

DefiLlama reported an even larger figure of $3.35 billion in outflows from Binance, while Glassnode data shows the exchange’s BTC balance having declined by 5.7% or around $1 billion over the past seven days.

CEX asset flows. Source: DeFiLlama

However, in a June 10 Twitter post, CZ argued that some exchange outflow data can be skewed as some third-party analytics measure change in assets under management as “outflow,” which would include times when crypto prices decline.

CZ instead claimed the firm’s outflow over the past 24 hours on June 9 was around $392 million, which pales in comparison to the $7 billion in one-day outflow that was recorded last year in November, around the time of FTX’s collapse.

CZ continued to explain that large inflows and outflows are perfectly normal during times of volatility.

“Some even only measure outflow, not inflows. On a sharp price movement day like today, many arbitrage traders move a lot of funds between exchanges, usually exponentially more than on normal days.”

Related: Binance says it’s ‘different’ from other exchanges amid SEC lawsuit

Since the SEC’s lawsuits against Binance and Coinbase on June 5 and 6, the total crypto market capitalization has declined by 7%, or more than $80 billion, according to CoinGecko.

On June 9, Cointelegraph reported that decentralized finance volumes surged more than 400% following the twin lawsuits targeting thecentralized exchanges.

Magazine: Binance, Coinbase head to court, and the SEC labels 67 crypto-securities: Hodler’s Digest, June 4-10

Cantor Fitzgerald, led by Trump’s Commerce secretary nominee, struck deal to acquire 5% stake in Tether