Read

/send

<div class="protos">
 <div>
 <div>
 <div> 
 Iranian crypto exchange Bit24.cash has reportedly leaked the personal and financial details of its 230,000 users following a security flaw in its know-your-customer (KYC) database. 
 The <a rel="dofollow" title="exchange" href="https://thebittimes.com/tag/exchange.html">exchange</a>’s KYC and anti-money laundering (AML) measures stipulate that <a rel="dofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> must submit a photo of themselves alongside their ID, credit card, and written consent to trade on the site.&nbsp;&nbsp; 
 However, a report from Cybernews details a flaw in the exchange’s cloud software that has let slip the identifying details of its customers. According to the report, researchers accessed KYC data stored in S3 buckets, a form of cloud storage, by exploiting a misconfigured MinIO.&nbsp;&nbsp; 
 <figure class="wp-block-image size-large">
 <img decoding="async" loading="lazy" width="1024" height="989" src="https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp" alt class="wp-image-57596" srcset="https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 1024w, https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 300w, https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 768w, https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 1054w" sizes="(max-width: 1024px) 100vw, 1024px">
 <figcaption class="wp-element-caption">
 An image of leaked data from the KYC database, purportedly exposing a user’s personal details.
 </figcaption>
 </figure> 
 Read more: Chinese billionaire behind Himalaya Exchange indicted for $1B scheme 
 Researchers say this flaw “poses a severe threat, as threat actors could potentially exploit the exposed data for identity theft, fraudulent transactions, and phishing attacks.”&nbsp; 
 They added, “With access to such comprehensive personal and financial data, malicious actors could impersonate individuals, gain unauthorized access to accounts, execute fraudulent transactions, and potentially cause substantial financial and personal harm.” 
 According to <a rel="dofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> analytics firm TRM Labs, <a rel="dofollow" title="Bit24" href="https://thebittimes.com/tag/bit24.html">Bit24</a> is the fifth largest <a rel="dofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> <a rel="dofollow" title="exchange" href="https://thebittimes.com/tag/exchange.html">exchange</a> in <a rel="dofollow" title="Iran" href="https://thebittimes.com/tag/iran.html">Iran</a> when it comes to incoming volume. 
 Bit24 responded to the Cybernews report, calling it&nbsp;“inaccurate and misleading.” A security engineer said, “The reference to a misconfigured MinIO instance granting access to S3 buckets containing KYC data is wholly untrue and does not align with our system architecture or security protocols.” 
 The engineer said Bit24’s security is one of its ‘utmost priorities’ and that concerned users should contact the exchange. According to Cybernews, the security flaw is no longer present.&nbsp;&nbsp; 
 Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;Instagram,&nbsp;Bluesky, and&nbsp;Google News, or subscribe to our&nbsp;YouTube&nbsp;channel. 
 </div>
 </div> 
 </div> 
</div> 
Source: <a rel="dofollow" target="_blank" href="https://thebittimes.com/iranian-crypto-exchange-bit24-reportedly-leaks-230-000-users-kyc-data-tbt75934.html">https://thebittimes.com/iranian-crypto-exchange-bit24-reportedly-leaks-230-000-users-kyc-data-tbt75934.html</a>

Iranian crypto exchange Bit24 reportedly leaks 230,000 users’ KYC data

TheBitTimes

Other articles published on Jan 8, 2024

Why Is The Crypto Market Down Today?

Here's Catalyst for BTC's Potential 6,000% Rise, 9.25 Trillion SHIB May Be Burned This Month, $1....

Spot Bitcoin ETF: This Issuer May Miss First Wave of Launch

The New Economic Super Cycle: AI and Decarbonization Driving Growth

South Korean Lawmaker: Top Crypto Exchanges ‘Neglect Responsibilities’

Shiba Inu Price Prediction as $100 Million Trading Volume Comes In – Meme Coins Making a Comeback?

Join our free newsletter for daily crypto updates!