2024

Partial

A transaction involving nearly $15 billion worth of XRP from an unknown wallet to the Bitfinex exchange as part of a “partial payments exploit” has failed.
The transaction was first brought to the public’s attention by the blockchain tracking account known as Whale Alert, which reported a jaw-dropping transfer of 25.6 billion XRP, nearly half of the cryptocurrency’s circulating supply, from an anonymous wallet to Bitfinex.
Yet, the excitement was short-lived as Whale Alert promptly deleted the post, <a href="https://twitter.com/whale_alert/status/1746634971870077198" rel="noopener noreferrer nofollow">citing an issue</a> with reading the Ripple node response that led to an erroneous alert.
Subsequently, Bitfinex Chief Technology Officer Paolo Ardoino revealed that the colossal transaction was, in fact, an attempted attack on Bitfinex through what is known as a “Partial Payments Exploit.”
Someone attempted to attack <a href="https://twitter.com/bitfinex?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@bitfinex</a> via "Partial Payments Exploit". Attack failed since Bitfinex properly handles 'delivered_amount' data field.<a href="https://t.co/EiGw9UQmmq" rel="noopener noreferrer nofollow">https://t.co/EiGw9UQmmq</a>
(updated with better gif) <a href="https://t.co/8I7vlO05ou" rel="noopener noreferrer nofollow">https://t.co/8I7vlO05ou</a> <a href="https://t.co/DxOnJLLkhU" rel="noopener noreferrer nofollow">pic.twitter.com/DxOnJLLkhU</a>
— Paolo Ardoino (@paoloardoino) <a href="https://twitter.com/paoloardoino/status/1746625178845471112?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 14, 2024</a>
This malicious act relied on the assumption that Bitfinex had incorrectly configured its software to process partial payments, a vulnerability that the attacker sought to exploit.
<h2 id="how-does-a-partial-payments-exploit-work">How Does a Partial Payments Exploit Work?</h2>
The mechanics of a partial payments exploit hinge on tricking a system into recognizing an amount different from what is actually sent.
The attacker manipulates a transaction field to show a smaller amount than what is indicated in another part of the transaction, aiming to receive credit for the difference from the targeted entity.
Fortunately for Bitfinex and its users, Ardoino revealed that the attack was thwarted because Bitfinex’s system correctly handles the ‘delivered_amount’ data field, rendering the exploit ineffective.
Surprisingly, the attacker’s ambitions did not end with Bitfinex.
Blockchain data also shows that they attempted a similar attack on Binance, this time with a staggering 58.9 billion XRP transfer.
However, just like their previous endeavor, this attack also met with failure.
<h2 id="hackers-continue-to-target-bitfinex">Hackers Continue to Target Bitfinex</h2>
In November last year, Bitfinex <a class="editor-rtfLink" href="https://cryptonews.com/news/bitfinex-customers-targeted-in-phishing-attacks-after-support-agent-hack.htm" target="_blank" rel="noopener noreferrer nofollow">experienced a “minor” security incident</a> after one of its customer support agents fell victim to a hacking attempt, leading to several users being targeted in a series of phishing attacks.
The <a class="editor-rtfLink" href="https://cryptonews.com/guides/best-crypto-exchanges.htm" target="_blank" rel="noopener noreferrer nofollow">crypto exchange</a> said the incident occurred between October 30 and November 5.
However, Bitfinex assured its customers that the impact was minimal and no significant damage occurred.
The breach occurred through the phishing of a customer support agent, who had access to partial information.
Fortunately, the agent did not have senior permissions and had limited access to supporting tools and help desk tickets, as confirmed by Bitfinex.
The exchange emphasized that its systems remained uncompromised and no customer funds were lost throughout the incident.
The company also said it has reported the breach to law enforcement and is actively collaborating with investigative authorities to identify and apprehend the perpetrator behind the phishing attack.
“We have a strong track record of securing successful convictions against individuals who have attempted to attack our operations in the past,” Bitfinex said.
Founded in Hong Kong in 2012, Bitfinex has established itself as a significant player in the cryptocurrency industry.
Under the leadership of CEO Jean-Louis van der Velde since 2013, the exchange has risen to 17th place in CoinGecko’s “Trust Score” index among all cryptocurrency exchanges.

Attack on Bitfinex Exchange Involving $15 Billion XRP Transaction Failed: Paolo Ardoino

Table of Contents

Cryptonews.com

Other articles published on Jan 15, 2024

Crypto Rating Agencies: A Call for Trust and Transparency in the Cryptocurrency Sector

Unmasking Bitcoin’s Environmental and Financial Impact

XAI Coin Surges by 49% Following Inspiration from Elon Musk’s AI Venture

Celsius Network Transferred $125 M in ETH; Good for Creditors?

Terra Founder Makes New Move Against US Extradition

Which Cryptocurrency to Buy Today? LINK, TON, ENS

Join our free newsletter for daily crypto updates!