Quant

Holo

April

<p>The crypto bull market has returned, as have crypto hacks. Bitrue, a popular cryptocurrency exchange, was the victim of a cyber attack that resulted in a $23 million loss. The hack was carried out using an exploit that targeted the exchange&#8217;s hot wallet, which is connected to the internet and used for instant transactions.&nbsp;</p>



<p>The incident has once again highlighted the vulnerabilities and risks associated with cryptocurrency hot wallets. Upon discovering the breach, Bitrue immediately halted all trading and withdrawals to contain the situation.&nbsp;</p>



<h2 id="bitrue-falls-casualty-to-the-latest-defi-hacks">Bitrue falls casualty to the latest DeFi hacks</h2>



<p>Bitrue <a href="https://support.bitrue.com/hc/en-001/articles/17538384324121" rel="nofollow noopener" target="_blank">announced </a>on April 14 that it had to temporarily suspend all withdrawals due to a &#8220;brief exploit&#8221; of its hot wallet. After conducting additional security checks, the company expects to reopen withdrawals on April 18, 2023. While reporting the happenings on their blog, the exchange stated:</p>



<blockquote class="wp-block-quote"><p>We have identified a brief exploit in one of our hot wallets on 07:18 (UTC), 14 April 2023. We were able to address this matter quickly and prevented the further exploit of funds. We take this matter seriously and are currently investigating the situation.</p><cite>Bitrue Team</cite></blockquote>



<p>Bitrue emphasized that it was able to address the issue expeditiously, allowing the platform to prevent further losses of capital. The exchange added that less than 5% of the exchange&#8217;s total funds were stored in the affected hot wallet.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">1/4: We have identified a brief exploit in one of our hot wallets on 07:18 (UTC), 14 April 2023. We were able to address this matter quickly and prevented the further exploit of funds. We take this matter seriously and are currently investigating the situation. <a href="https://t.co/QioPHSB2DM" rel="nofollow" target="_blank">pic.twitter.com/QioPHSB2DM</a></p>&mdash; Bitrue (@BitrueOfficial) <a href="https://twitter.com/BitrueOfficial/status/1646811220543168512?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">April 14, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>The exchange has temporarily suspended all withdrawals. It anticipates restarting withdrawals on April 18. In addition, the exchange stated that all identified users affected by the incident would receive full compensation.</p>



<blockquote class="wp-block-quote"><p>To conduct additional security checks, Bitrue will temporarily suspend all withdrawals and expect to reopen withdrawals on 18 April 2023. We seek your understanding and patience during this time. All identified users who are affected by this incident will be compensated in full. We are committed to maintaining transparency throughout this process and thank you for your continued support.</p><cite>Bitrue Team</cite></blockquote>



<p>According to CoinGecko data, Bitrue trades an average of over $1 billion per day, with bitcoin and ether among the most-traded token pairs. In addition, the Bitrue coin has declined marginally over the past 24 hours.</p>



<p>According to the announcement, the affected currencies on the exploited hot wallet included Ether, Shiba Inu, Quant (QNT), GALA, Holo (HOT), and Polygon.</p>



<h2 id="bitrue-s-wallet-operation-strategy">Bitrue’s wallet operation strategy</h2>



<p>To manage user funds, centralized cryptocurrency exchanges typically employ a mix of cold and hot wallets. Cold wallets are offline storage solutions. These wallets provide greater security against cyber attacks. Hot wallets that are connected to the internet allow for faster deposits and withdrawals, but they are more vulnerable to hacks.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">Apparently Bitrue got hacked and they are unresponsive. <br><br>All 140k hacked <a href="https://twitter.com/search?q=%24QNT&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$QNT</a> already got sold by hacker, the price handled it well. Sorry for those that lost their coins😢<a href="https://twitter.com/search?q=%24WTK&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$WTK</a> fam, get your tokens of Bitrue ASAP!!! Or any exchange for that matter. Not worth it the risk. <a href="https://t.co/2AUvrp4okk" rel="nofollow" target="_blank">https://t.co/2AUvrp4okk</a></p>&mdash; San ⭕ (@SanNL11) <a href="https://twitter.com/SanNL11/status/1646778078096420866?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">April 14, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>The Bitrue incident is the second major attack in recent days to target centralized exchanges. In a similar incident earlier this week, the South Korean exchange <a href="https://www.cryptopolitan.com/south-koreas-gdac-hacked-for-nearly-14m/?swcfpc=1">GDAC </a>lost nearly $13 million in crypto assets. These hacks beg the question, can crypto wallets be both accessible and hacker-proof?</p>



<h2 id="is-there-a-solution-to-crypto-hacks">Is there a solution to crypto hacks?</h2>



<p>The recent wave of hacks, bankruptcies, and lost seed phrases has spawned a slew of crypto wallet applications designed to store private keys associated with cryptocurrencies securely. Many users are embracing the self-custody mantra, taking security into their own hands with a permissionless wallet security infrastructure, as they seek to maintain full control and ownership of their digital assets.</p>



<p><a href="https://www.cryptopolitan.com/sushiswap-strategy-to-reimburse-user-funds/">Hackers </a>are constantly looking for new ways to exploit flaws in security wallet software. Worryingly, hackers can &#8220;track and trace&#8221; quorum members from the multi-sig wallet, giving them visibility into which users are signing for the multi-sig (typically using their own hot wallets).</p>



<p>Implementing stringent security measures and increasing on-chain transparency is essential to protect digital assets, prevent fraudulent activities, and restore confidence in the industry. The losses caused by these scandals have affected both large and small financial institutions, startups, and individual investors.&nbsp;</p>



<p>As cryptography develops, a secure multiparty computation may emerge to grant everyone access to institutional-grade custody.</p>



<p>As the investigation into the Bitrue hack continues, the incident underscores the need for increased vigilance and security measures to safeguard the rapidly growing crypto ecosystem against cyber threats. Crypto exchanges must remain proactive in mitigating risks and protecting their users&#8217; assets to maintain trust and confidence in the industry.</p>

Bitrue crypto exchange hacked, loses $23 million due to hot wallet exploit

目录

Cryptopolitan_News

发布于 2023年4月14日的其他文章

OKX Enhances User Experience with Blur Partnership and OKX Earn Revamp

Bitcoin Reaches $31,000: Investors Want More!

U.S. banks that have weathered the storm: Details

WhatsApp introduces Account Protect, Device Verification security features

SNKR2, a Newly Transformed Tokenomics, Onboards the WEMIX Chain

OpenAI's GDPR Violation: Garante's Mandate for Transparency and Privacy

订阅我们免费的电子期刊，获取每日最新加密领域动态！