An incident occurred in which about 22.5 billion yen of cryptographic assets were stolen by hacking



It turns out that a large-scale hack occurred on BitMart on the cryptocurrency exchange on December 4, 2021, and at least $ 150 million worth of cryptocurrency assets were stolen. External security companies estimate that the total damage amounted to nearly $ 200 million.

BitMart Security Breach Update – BitMart
https://support.bmx.fund/hc/en-us/articles/4411998987419

Hackers take $ 196 million from crypto exchange Bitmart, security firm says
https://www.cnbc.com/2021/12/05/hackers-take-196-million-from-crypto-exchange-bitmart-in-large-breach.html

Bitmart hacked for $ 200M following Ethereum, Binance Smart Chain exploit
https://cointelegraph.com/news/bitmart-hacked-for-200m-following-ethereum-binance-smart-chain-exploit

BitMart founder and CEO Sheldon Xia confirms on Twitter that there was a major security breach related to one of our ETH (Ethereum) and BSC (Binance Smart Chain) hot wallets. Did. Hackers may have withdrawn approximately $ 150 million in assets. '



In addition, PeckShield, a blockchain-related security company, has stolen $ 100 million (about 11.2 billion yen) from Ethereum and $ 96 million (about 10.8 billion yen) from Binance Smart Chain, and the total damage amount is about about 10.8 billion yen. We have released an estimate that it has reached $ 200 million. In particular, the damage is widespread, with a total of 20 types of cryptocurrency assets being stolen, including the meme coin BabyDoge coin, from the Binance smart chain.



BitMart has not disclosed how this hack was done, but according to Peckshield, a typical technique called 'transfer out swap wash' was used. It converts crypto assets stolen from BitMart into Ether , a currency in Ethereum, via a decentralized crypto asset exchange called 1inch, and breaks the link between the sender's and receiver's addresses to make a transaction. It is a method of sending money to Tornado Cash, a service that anonymizes, making it difficult to track funds.



CNBC, the US news media, asked BitMart if the customer's funds were hacked and if the victims would be compensated, but no response was obtained. In addition, CNBC also contacted the email address listed on Mr. Xia's Twitter account, but said that the message 'Access was denied' was returned.

BitMart has announced that it will take steps to suspend withdrawals from BitMart for the foreseeable future.

in Web Service,   Security, Posted by log1l_ks