Summary # On September 26, 2020, KuCoin, a Singapore-based cryptocurrency exchange, experienced a significant security breach, resulting in the theft of approximately $281 million worth of cryptocurrencies. The hackers obtained the private keys to the exchange’s hot wallets. The hackers sold the stolen cryptocurrency from their addresses on decentralized exchanges and anonymized the stolen cryptocurrencies through the mixing services. The incident caused a temporary drop in the price of KuCoin’s exchange token KCS by 14%, to $0.
...
Summary # Eterbase, a European cryptocurrency exchange, based in Slovakia, suffered a significant security breach on September 7, 2020. Multiple hot wallets were compromised, including in Bitcoin, Ethereum, Tron, Tezos, Algorand and Ripple chains, leading to the theft of approximately $5,400,000 in various cryptocurrencies. The stolen funds were moved to different addresses and subsequently withdrawn to centralized exchanges like Binance, Huobi, and HitBTC.
Attackers # The identity of the attackers remains unknown.
...
Summary # In August 2020, 2gether, a European cryptocurrency platform, was hacked, resulting in the loss of €1.183 million worth of cryptocurrencies. A combination of poor security practices and system vulnerabilities allowed the attackers to access user funds, causing significant damage to the platform’s reputation and customer trust.
Attackers # The attackers behind the 2gether hack remain unidentified.
Losses # 2gether lost €1.183 million worth of cryptocurrencies, which included various types of crypto assets.
...
Summary # On November 27, 2019, Upbit, one of South Korea’s largest cryptocurrency exchanges, fell victim to a major cyberattack, resulting in the theft of approximately $49 million worth of Ethereum (342,000 ETH). The attack specifically targeted Upbit’s hot wallet, from which the funds were transferred to an unknown wallet address. To safeguard the remaining assets, Upbit promptly moved them to cold storage as a safety measure. The exchange took immediate action, replenishing the stolen funds with its own assets and ensuring no impact on its customers.
...
Summary # In July 2019, BITPoint, a Japanese cryptocurrency exchange, suffered a security breach in which hackers gained unauthorized access to the exchange’s hot wallets, resulting in the theft of approximately $28 million worth of cryptocurrency. The attack was attributed to the theft of private keys associated with the hot wallets.
Attackers # The identity of the hackers who attacked BITPoint in July 2019 is not publicly known. Bitpoint has not released any information regarding the perpetrators of the attack, and it is unclear whether any suspects have been identified or apprehended by law enforcement authorities.
...
Summary # On June 2, 2019, Kraken, a respected cryptocurrency exchange, experienced a flash crash on its Bitcoin-to-Canadian Dollar (BTC/CAD) trading pair. In a matter of seconds, the price of BTC dropped from $11,200 CAD to just over $101 CAD, a decline of over 99%. The incident resulted in losses of approximately $10,470,000 USD, equivalent to 1,200 BTC. Analysts suggest that this event was executed by a hacker attempting to siphon funds from Kraken.
...
Summary # In May 2019, Binance, one of the largest cryptocurrency exchanges, experienced a significant security breach resulting in the loss of millions of dollars. The attack was executed by unknown hackers who managed to bypass Binance’s security measures and gain access to user API keys, 2FA codes, and other sensitive information. With this access, the attackers were able to withdraw approximately 7,000 BTC from the exchange’s hot wallet.
...
Summary # CoinBene, a Singapore-based cryptocurrency exchange, reportedly suffered a security breach on March 25, 2019, resulting in the loss of over $105 million worth of various tokens and coins. The exchange denied being hacked and claimed it was undergoing maintenance. CoinBene has not provided any official statement regarding the incident.
Attackers # The identity of the attacker remains unknown. The following addresses were involved in the hack:
0xA1BF1ED1e8DE34477fB3dCE27c2eA2EA4163AcbA 0xb3dF999C5dC026dea265AEB02b8519844C9b6D5E 0xba351e7f0c630b3baa30a0ff38f6f4a333ef2133 Losses # CoinBene lost $105,150,329 worth of various assets.
...
Summary # On March 24, 2019, DragonEx, a Singapore-based cryptocurrency exchange, was hacked for $7 million. The attacker gained access to one of the exchange’s hot wallets, which are used to store user funds that are available for withdrawal.
Attackers # Attackers associated with Lazarus Group gained access through a sophisticated phishing attack. More about Lazarus
ETH
DragonEx Hacker wallet: 0xa7f72Bf63EDeCa25636F0B13Ec5135296ca2eBb2 Losses # The attackers managed to steal a total of $7 million:
...
Summary # South Korean cryptocurrency exchange Coinbin, which took over the previously hacked exchange Youbit, filed for bankruptcy on February 20, 2019, following embezzlement by an employee. The employee, previously the CEO of Youbit and responsible for cryptocurrency balances at Coinbin, was accused of neglecting his duties and embezzling funds. Specifically, he allegedly appropriated the key to an Ethereum wallet and claimed the cryptographic key had been lost. In addition to these events, Youbit was previously hacked twice: in April and December 2017, losing around 4,000 Bitcoin and $35 million, respectively.
...