Bounty

2024

WazirX

Indian cryptocurrency exchange WazirX has&nbsp;<a style="text-decoration:none" href="https://x.com/NischalShetty/status/1814998149347369069" rel="noopener noreferrer nofollow">unveiled</a> a significant bounty program, offering up to $23 million for the recovery of assets stolen in a recent cyberattack.&nbsp;
<div>
 <blockquote class="twitter-tweet">
 The total bounty has been updated to $23M thanks <a href="https://twitter.com/zachxbt?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@zachxbt</a> for the suggestion 🙏 <a href="https://t.co/qzaqwAuLod" rel="noopener noreferrer nofollow">https://t.co/qzaqwAuLod</a>— Nischal (Shardeum) 🔼 (@NischalShetty) <a href="https://twitter.com/NischalShetty/status/1814998149347369069?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">July 21, 2024</a>
 </blockquote>
</div>
The attack, which targeted one of the exchange’s multisig wallets, resulted in a substantial loss OF $234 million. Initially, WazirX offered a reward of $10,000 in USDT for actionable intelligence that could lead to freezing the stolen funds, along with a 5% reward on recovered amounts. However, this offer faced criticism for being too modest.
&nbsp;
In response to feedback, WazirX increased the bounty significantly. The latest update offers up to $23 million for the successful recovery of the stolen assets. This reward is intended to incentivize white hat hackers and security experts to assist in tracing and recovering the stolen funds.&nbsp;
&nbsp;
The program will run for three months, with the possibility of extension based on the progress and requirements of the recovery efforts.
<h2 dir="ltr" id="span-span-background-of-the-incident-span-span">Background of the Incident</h2>
The security breach&nbsp;<a style="text-decoration:none" href="https://bsc.news/post/north-korean-hackers-suspected-in-235-m-wazir-x-crypto-heist" rel="noopener noreferrer nofollow">occurred</a> on July 18, leading to a significant outflow of funds from one of WazirX’s multisig wallets. The company confirmed the breach and temporarily halted all withdrawals to mitigate further losses. Co-founder Nischal Shetty clarified that the hack was not due to phishing but involved complex multi-signature processes.
&nbsp;
Shetty&nbsp;<a style="text-decoration:none" href="https://x.com/NischalShetty/status/1814949731522486436" rel="noopener noreferrer nofollow">explained</a> that three WazirX team members, each using separate hardware wallets, signed the transactions. Despite their physical separation and secure bookmarks, the attack involved a final signature from Liminal, WazirX's custody provider.&nbsp;
&nbsp;
Shetty emphasized that no hardware keys from the WazirX team were compromised and that Liminal’s signing process is under detailed investigation.
<h2 dir="ltr" id="span-span-ongoing-investigations-and-actions-span-span">Ongoing Investigations and Actions</h2>
WazirX is collaborating with forensic experts to conduct a thorough audit of the compromised devices and the signing process. This investigation aims to determine whether any of the WazirX devices were compromised or if the attack exploited weaknesses in the Liminal system.
&nbsp;
The forensic analysis will help clarify how the malicious payload was signed and provide insights into the attack’s execution. Shetty&nbsp;<a style="text-decoration:none" href="https://x.com/NischalShetty/status/1815060549761105934" rel="noopener noreferrer nofollow">assured</a> that the WazirX team is working tirelessly to resolve the issue and rebuild trust within the community.

WazirX Launches Massive $23M Bounty to Track Down $234M Stolen Assets

目录

BSCN

发布于 2024年7月30日的其他文章

Bitcoin Whales Scoop 5,900 BTC In Recent Correction, Recovery Expected Soon?

XRP Price Surges As Whale Movements Signal Bullish: Can SEC Speculation Fuel Rally?

OpenAI Enhances ChatGPT with Realistic Voice

BitClout Founder Charged with Multi-Million Dollar Crypto Fraud

Chainlink Join Hands With Wenia to Boost Transparency of Colombian Peso-Backed Stablecoin

Surprise Rankings: Blockchain Analytics Firm Reveals Top-Earning Crypto Projects

订阅我们免费的电子期刊，获取每日最新加密领域动态！