Artificial Intelligence

Tornado Cash

Security

Tornado

Safety

<p>Indodax, Indonesia’s largest cryptocurrency exchange, was hit by a massive cyber attack on September 11, 2024. It resulted in the loss of $22 million. The attack was aimed at hot wallets, and the attackers made away with BTC, ETH, and TRX, among others.</p>
<p>Therefore, Indodax has ceased operations to fix the vulnerability and avoid more losses after the breach.</p>
<h2 class="wp-block-heading" id="h-hack-hits-indodax-hot-wallets"><strong>Hack Hits Indodax Hot Wallets</strong></h2>
<p>Security firms SlowMist and CertiK identified the hot wallets of Indodax as hacked. The hack allowed attackers to withdraw more than $22 million in tokens. Among the stolen assets there were $1.4 million in Ethereum, $2.4 million in Tron, $1.4 million in Bitcoin, and other cryptocurrencies.</p>
<p>Blockchain analysis showed that more than 150 doubtful transactions took place prior to the funds being transferred to Ethereum.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Indodax(<a href="https://twitter.com/indodax?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@indodax</a>) was hacked for $22M 10 hours ago, including:<br>6.14M <a href="https://twitter.com/search?q=%24USDT&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$USDT</a>;<br>1,047 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$ETH</a>($2.48M);<br>25 <a href="https://twitter.com/search?q=%24BTC&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$BTC</a> ($1.41M);<br>2.2M <a href="https://twitter.com/search?q=%24MATIC&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$MATIC</a>($849K);<br>1.4M <a href="https://twitter.com/search?q=%24ARB&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$ARB</a>($749.6K);<br>2M <a href="https://twitter.com/search?q=%24ENA&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$ENA</a>($465K);<br>…<br><br>The hacker has converted most of the stolen assets into native tokens and currently holds: <br>5584… <a href="https://t.co/mX2wmj75k7" rel="noopener noreferrer nofollow">pic.twitter.com/mX2wmj75k7</a></p>— Lookonchain (@lookonchain) <a href="https://twitter.com/lookonchain/status/1833750952832368885?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 11, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The breach is quite severe, but the exchange still has more than $400 million worth of tokens on its platform. Nevertheless, the exchange suspended all platform activities and claimed the move was to perform ‘maintenance.’ Users complained of missing wallet funds, thus questioning the hackers’ scope of the attack.</p>
<h2 class="wp-block-heading" id="h-possible-lazarus-group-involvement"><strong>Possible Lazarus Group Involvement</strong></h2>
<p>Yosi Hammer, head of Artificial Intelligence at Cyvers, stated that the tactics adopted in the attack resembled previous hacks. And the said tactics were linked to the Lazarus Group of North Korea.</p>
<p>This notorious group has been associated with several large scale cryptocurrency thefts including the recent Ronin Network hack. The hackers are reportedly in the process of laundering the stolen assets. They may choose to use Tornado Cash to anonymize the transactions.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">ALERT<img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f4f7.png" alt="📷" class="wp-smiley" style="height: 1em; max-height: 1em;">Hey <a href="https://twitter.com/indodax?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@indodax</a> , Our system has detected multiple suspicious transactions involving your wallets on different networks. Suspicious address already holds 14.4 million USD and swapping the tokens to Ether.<br><br>Want to keep your company off our alerts radar? Learn how to secure… <a href="https://t.co/Lzpi5uthXS" rel="noopener noreferrer nofollow">pic.twitter.com/Lzpi5uthXS</a></p>— <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Cyvers Alerts <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1833629057256239175?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 10, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The exact way in which the attack was carried out is still being analyzed by blockchain security professionals. Some believe that Indodax’s withdrawal systems were hacked, while others think that the signature machine was used to approve the transactions that were not supposed to be approved. Despite the lack of specific information, the public has been advised to exercise caution.</p>
<h2 class="wp-block-heading" id="h-rising-crypto-crimes-and-regulatory-challenges"><strong>Rising Crypto Crimes and Regulatory Challenges</strong></h2>
<p>This incident is not a standalone case as there has been an increase incrypto-related crimes in recent times. On September 9, 2024, the U. S. FBI revealed that crypto fraud and scams <a href="https://www.ic3.gov/Media/PDF/AnnualReport/2023_IC3CryptocurrencyReport.pdf" rel="noopener noreferrer nofollow">had risen</a> by 45% in 2023 compared to the previous year.</p>
<p>The total of losses were estimated to have reached more than $5.6 billion. As for cryptocurrencies, the FBI has noted that due to their decentralization, they are easily used for theft and money laundering.</p>
<p>FBI Director Christopher Wray encouraged public to report similar crimes saying that this will help the authorities formulate new strategies. As such, crypto transactions are transparent and can be easily tracked. However, they can be easily transferred to another country, making it hard for law enforcement to pursue culprits.</p>
<p>This has consequently resulted in people demanding for tightening of laws, in a bid to shield investors from such risks.</p>
<h2 class="wp-block-heading" id="h-indodax-reassures-users-but-faces-scrutiny"><strong>Indodax Reassures Users but Faces Scrutiny</strong></h2>
<p>To this end, Indodax has sought to calm its users by revealing that all cryptocurrencies and fiat money balances are safe from the <a href="https://www.thecoinrepublic.com/2024/09/04/donald-trumps-new-defi-venture-faces-security-concerns-post-hack/" rel="noopener noreferrer nofollow">recent hack</a>. Unfortunately, the exchange’s Instagram account was also compromised and used to promote a fraudulent giveaway, which only casts doubt on the platform’s security.</p>
<p>However, there are some concerns that some of these exchanges may not have adequate protection mechanisms to safeguard investors. Since its establishment in 2014, Indodax has become one of the biggest crypto trading platforms in Indonesia, with more than 4.3 million registered users.</p>
<p>The company has been approved by the Commodity Futures Exchange Supervisory Board as well as the Ministry of Communication and Information of the Republic of Indonesia. Nevertheless, this hack has given rise to some concerns. There are doubts about the efficiency of these measures and whether more supervision is required in the sphere of cryptocurrencies.</p>
<p>The Indodax breach is the most recent of the many crypto exchange hacks that have occurred in the past. Peckshield, a blockchain security company, identified over 10 major hacks in August 2024, with losses amounting to $313.86 million.</p>
<h2 class="wp-block-heading" id="h-a-question-of-safety"><strong>A Question of Safety</strong></h2>
<p>These attacks were mainly phishing and unauthorized transactions, which prove that the biggest and the most successful social networks are still not safe enough. With the increasing usage of cryptocurrencies all around the world, the risks connected with it, are also increasing.</p>
<p>By 2024, cryptocurrencies have became more popular. They are adopted by the mainstream financial markets with the launch of ETFs and a high level of political participation. However, the <a href="https://www.thecoinrepublic.com/2024/08/21/hacker-steals-55-million-in-dai-tokens-via-phishing-attack/" rel="noopener noreferrer nofollow">risks are increasingly</a> coming to light as both the retail and institutional investors are victims of a growing number of complex attacks.</p>
<p>The post <a href="https://www.thecoinrepublic.com/2024/09/12/is-your-crypto-safe-indonesia-exchange-indodax-hacked-for-22m/" rel="noopener noreferrer nofollow">Is Your Crypto Safe? Indonesia Exchange INDODAX Hacked for $22M</a> appeared first on <a href="https://www.thecoinrepublic.com" rel="noopener noreferrer nofollow">The Coin Republic</a>.</p>

Is Your Crypto Safe? Indonesia Exchange INDODAX Hacked for $22M

Table of Contents

Thecoinrepublic.com

Other articles published on Sep 12, 2024

Ether.Fi Partners with Scroll to Launch Crypto-Backed Visa Credit Card

Magic Eden Launches New US Domain, Separates Services for US and International Users

Cardano’s Latest Upgrade: What is Chang Hard Fork?

Great News for Cryptocurrencies from the UK: Here Are the Details!

Highest Bitcoin Exchange Outflows Since May Hint at Another BTC Price Rally

Saylor: Bitcoin’s Liquidity is Key, Predicts $13M Price in 21 Years

Join our free newsletter for daily crypto updates!