Crypto.com Refunds Users After 483 Accounts Were Hacked
- According to the company, the hacker stole “4,836.26 ETH, 443.93 BTC and approximately US$66,200 in other currencies” from 483 accounts.
- In order to prevent future attacks, Crypto.com has implemented a new layer of security called “Worldwide Account Protection Program (WAPP)”.
Shutterstock
Popular crypto exchange Crypto.com suffered from a security breach on Monday, which saw 483 users loose around $34 million in digital assets, the company said in a blog post on 20 January.
According to the announcement, the hacker was able to take “4,836.26 ETH, 443.93 BTC and approximately US$66,200 in other currencies” from 483 Crypto.com customer accounts, with the total value of the stolen assets being around $34 million. The blog post also revealed that “there was no loss of customer funds” as all affected accounts have already been “fully reimbursed”. The chief information security officer of the exchange, Jason Lau, said in a statement:
“Crypto.com is a leader in security and compliance, including our recent SOC 2 announcement. While our goal is to prevent any security breaches, our industry leading insurance policy and Worldwide Account Protection Programs offer our customers additional protections in rare instances when there is an incident.”
On Monday, after reports of suspicious activities on customer accounts, Crypto.com decided to pause all withdrawals from the platform, which lasted for around 14 hours. The exchange quickly realized that a small number of transactions were being authorized without the two-factor authentication (2FA) being entered, which forced it to revoke all 2FA tokens. After this, customers were allowed to trade only after relogging and reactivating their 2F tokens.
In order to prevent future attacks, the exchange claims to have implemented a new layer of protection — called the “Worldwide Account Protection Program (WAPP)” — which will requires traders to whitelist a withdrawal address at least 24 hours before withdrawing funds. If a third party gains unauthorized access to these accounts, the exchange will be able to restore “up to USD$250,00” to qualified users.
- A hacker was able to manipulate the price of the AllianceBlock token on BonqDAO, which allowed him to drain close to $90 million worth of crypto from the protocol.
- Both platforms have paused their services, and are currently in the process of removing liquidity as to hinder the hacker’s ability to convert the stolen tokens.
Shutterstock
- North Korea’s Lazarus Group has moved around $63.5 million of crypto assets connected to the Harmony bridge hack over the weekend.
- The hackers tried to move a portion of the funds through Binance and Huobi, but the exchanges were able to freeze their account and recover around 124 BTC.
- A hacker targeted a vulnerability in DeFi protocol Ankr to mint trillions of aBNBc tokens, which he eventually swapped for 5 million USDC.
- The event caused the price of aBNBc to plummet by 99%, which allowed another individual to steal $15.5 million from stablecoin issuer Helio as it did not have up-to-date pricing on aBNBc.