Read

/send

<div class="protos">
 <div>
 <div>
 <div> 
 Iranian crypto exchange Bit24.cash has reportedly leaked the personal and financial details of its 230,000 users following a security flaw in its know-your-customer (KYC) database. 
 The <a rel="dofollow" title="exchange" href="https://thebittimes.com/tag/exchange.html">exchange</a>’s KYC and anti-money laundering (AML) measures stipulate that <a rel="dofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> must submit a photo of themselves alongside their ID, credit card, and written consent to trade on the site.&nbsp;&nbsp; 
 However, a report from Cybernews details a flaw in the exchange’s cloud software that has let slip the identifying details of its customers. According to the report, researchers accessed KYC data stored in S3 buckets, a form of cloud storage, by exploiting a misconfigured MinIO.&nbsp;&nbsp; 
 <figure class="wp-block-image size-large">
 <img decoding="async" loading="lazy" width="1024" height="989" src="https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp" alt class="wp-image-57596" srcset="https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 1024w, https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 300w, https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 768w, https://cdn.thebittimes.com/images/2024/01/09/22b67c7886a829107a9b94a2ec86a84f.webp 1054w" sizes="(max-width: 1024px) 100vw, 1024px">
 <figcaption class="wp-element-caption">
 An image of leaked data from the KYC database, purportedly exposing a user’s personal details.
 </figcaption>
 </figure> 
 Read more: Chinese billionaire behind Himalaya Exchange indicted for $1B scheme 
 Researchers say this flaw “poses a severe threat, as threat actors could potentially exploit the exposed data for identity theft, fraudulent transactions, and phishing attacks.”&nbsp; 
 They added, “With access to such comprehensive personal and financial data, malicious actors could impersonate individuals, gain unauthorized access to accounts, execute fraudulent transactions, and potentially cause substantial financial and personal harm.” 
 According to <a rel="dofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> analytics firm TRM Labs, <a rel="dofollow" title="Bit24" href="https://thebittimes.com/tag/bit24.html">Bit24</a> is the fifth largest <a rel="dofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> <a rel="dofollow" title="exchange" href="https://thebittimes.com/tag/exchange.html">exchange</a> in <a rel="dofollow" title="Iran" href="https://thebittimes.com/tag/iran.html">Iran</a> when it comes to incoming volume. 
 Bit24 responded to the Cybernews report, calling it&nbsp;“inaccurate and misleading.” A security engineer said, “The reference to a misconfigured MinIO instance granting access to S3 buckets containing KYC data is wholly untrue and does not align with our system architecture or security protocols.” 
 The engineer said Bit24’s security is one of its ‘utmost priorities’ and that concerned users should contact the exchange. According to Cybernews, the security flaw is no longer present.&nbsp;&nbsp; 
 Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;Instagram,&nbsp;Bluesky, and&nbsp;Google News, or subscribe to our&nbsp;YouTube&nbsp;channel. 
 </div>
 </div> 
 </div> 
</div> 
Source: <a rel="dofollow" target="_blank" href="https://thebittimes.com/iranian-crypto-exchange-bit24-reportedly-leaks-230-000-users-kyc-data-tbt75934.html">https://thebittimes.com/iranian-crypto-exchange-bit24-reportedly-leaks-230-000-users-kyc-data-tbt75934.html</a>

Iranian crypto exchange Bit24 reportedly leaks 230,000 users’ KYC data

TheBitTimes

Other articles published on Jan 8, 2024

Why Is The Crypto Market Down Today?

MASK Coin Price is on Strong Support; Will The Bulls Prevail?

Analyst Predicts $570 Billion Inflow Amid Bitcoin Spot ETF Approval

North Korean hacker group Lazarus transfers $1.2 million in Bitcoin to holding wallet

Shiba Inu 9.25T SHIB Burn Sparks Rumors of $0.001 Breakout

Insights on the Impact of a Spot Bitcoin ETF on Altcoins

Join our free newsletter for daily crypto updates!