Former Cryptopia Employee Pleads Guilty to Stealing $175,000 Worth of Crypto

  • The man admitted to stealing around $175,000 worth of BTC and other cryptocurrencies from Cryptopia’s old deposit wallets.
  • The funds were subsequently returned and the theft wasn’t connected to the 2019 hack, court documents showed.
Cryptopia cryptocurrency exchange logo

Shutterstock

A man has pleaded guilty to stealing around $175,000 worth of cryptocurrencies and customer data from the Cryptopia exchange, New Zealand news outlet Stuff reported on 5 July. The former employee — whose name was redacted from court documents — appeared before the Christchurch District Court on 4 July, where he was convicted on two charges, theft by a person in a special relationship, and theft of more than $1,000. He will remain in custody until the bail sentencing, scheduled for October.

Following the January 2019 hack, which drained over $20 million worth of cryptocurrencies from the exchange, Cryptopia was placed into liquidation. The process is still ongoing and is managed by accountancy firm Grant Thornton. The documents from Monday’s hearing showed the employee copied private keys from Cryptopia’s numerous wallets and saved them on a USB storage device while working for the exchange. The employee allegedly raised concerns with management around the security of private keys beforehand, and kept them even after having his contract terminated during the liquidation process.

The theft was not connected to the hack, which the police are still investigating, but was discovered by Grant Thornton in September 2020 after a former Cryptopia client requested his funds be returned. An initial investigation showed that 13 BTC was missing from an old deposit wallet, two of which have been put through a mixing service.

Soon after the theft was discovered, the employee contacted Grant Thornton and admitted stealing the bitcoins, as well as another $7,000 worth of cryptocurrencies. The following day, he returned six bitcoins and promised to return the remainder if he wasn’t charged with theft. Later that month he admitted to police he had copied and removed the keys from Cryptopia’s premises, stolen the bitcoin and other cryptocurrency and put it through a mixing service. All of the funds were subsequently returned.

Discussion
Related Coverage
Unibot to Compensate Users Affected by Exploit
  • Popular Telegram bot Unibot, which is used to snipe trades on Uniswap, became a victim of a token approval exploit earlier today, when it was switching to a new router.
  • After confirming the exploit, Unibot assured users that their keys and wallets were safe, and that the project will compensate all affected users.
October 31, 2023, 3:01 PM
unlock

Shutterstock

Balancer Exploited After Giving Warning
  • DeFi protocol Balancer confirmed it was exploited almost a week after disclosing a critical vulnerability affecting several of its boosted pools.
  • The platform did its best to mitigate some of the risks but was unable to pause the affected pools, and an estimated $980,000 in DAI were stolen in an attack.
Kroll Data Breach Compromises FTX, BlockFi Customer Information
  • A cyber security incident at bankruptcy service provider Kroll has resulted in the exposure of “non-sensitive” customer data for claimants involved in the FTX and BlockFi cases.
  • Both companies confirmed that account passwords, systems, and funds remained safe, but warned customers to be on the lookout for phishing scams.