Tornado Cash

Read

Tornado

WazirX

An independent audit by Grant Thornton found no evidence that Liminal Custody’s infrastructure was involved in the $230 million WazirX hack.
Grant Thornton’s audit found that Liminal Custody, the Singapore-headquartered crypto custodian, was not the main source for the $230 million hack of WazirX, indicating the breach has originated “outside of Liminal’s infrastructure,” the company said in a Sept. 9 <a href="https://www.liminalcustody.com/blog/grant-thornton-affirms-liminal-security/" target="_blank" rel="noopener noreferrer nofollow">blog post</a>.
The breach, which occurred in July, <a href="https://crypto.news/indian-exchange-wazirx-loses-234m-in-recent-exploit/" target="_blank" rel="noopener noreferrer nofollow">allowed</a> attackers to siphon off more than $230 million in cryptocurrencies.
WazirX, which has since moved its assets to new multi-signature wallets, had initially pointed to discrepancies between Liminal’s interface and transaction data. However, an audit by Grant Thornton reportedly found no evidence of compromise in Liminal’s infrastructure, though Liminal Custody has not publicly shared the audit findings.
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 “Grant Thornton conducted a detailed assessment of Liminal’s infrastructure and have informed us that Liminal’s frontend and backend infrastructure is secure, with no evidence of any compromise or vulnerabilities related to the transaction workflow.”
 Liminal Custody
</blockquote>
<h2 class="wp-block-heading" id="no-breach-from-liminal-side">No breach from Liminal side</h2>
Liminal highlighted that discrepancies between the data payloads generated by its system and those received from the client suggested two possible sources for the breach: either vulnerabilities within the client’s infrastructure or the custodian’s frontend systems. The company added that it is still awaiting an “end-to-end review from our auditors.”
The company noted that its multi-signature wallet model ensures that client keys remain with customers, adding that users “can never initiate a transaction and all transactions always originate at our client’s end first.”
Following the exploit, WazirX tried to institute a “<a href="https://crypto.news/wazirx-implements-socialized-loss-strategy-following-235m-hack/" target="_blank" rel="noopener noreferrer nofollow">socialized loss strategy</a>,” which would have seen users access 55% of their funds with the remaining 45% held by the exchange in Tether (<a href="https://crypto.news/price/tether/" target="_blank" rel="noopener noreferrer nofollow">USDT</a>)&nbsp;equivalent tokens. However, the proposal was met with widespread&nbsp;<a href="https://crypto.news/wazirxs-socialized-loss-strategy-sparks-outrage-are-users-paying-for-the-exchanges-failures/" target="_blank" rel="noopener noreferrer nofollow">outrage</a>, with users accusing the exchange of trying to avoid taking full responsibility for the losses incurred from the hack. Subsequently, WazirX was forced to backtrack on the plan, asking for more time to work on a resolution.
Read more: <a rel="noopener noreferrer nofollow" href="https://crypto.news/wazirx-hacker-transfers-1600-eth-to-tornado-cash/"> WazirX hacker transfers 1600 ETH to Tornado Cash </a>

Audit finds $230M WazirX hack originated outside Liminal Custody

Table of Contents

crypto.news

Other articles published on Sep 9, 2024

Block Inc Beats Coinbase in Market Capitalization Race

Weekly Article Recap: 9/02-9/06

New Solana Memecoin Trump Loves Tesla (TRUMPTES) to Skyrocket 16,000% Before Exchange Listings

Binance Subsidiary Tokocrypto Receives Full License in Indonesia

Russia to Test Cryptocurrency for Cross-Border Payments Amid Western Sanctions

Toncoin chain expands despite crackdown on Telegram

Join our free newsletter for daily crypto updates!