Bitcoin Forum

Another crypto exchange got hacked and this time the victim is Bisq, a trading platform that has temporarily ceased all its trading services that unfortunately cost users at least $250,000 in digital funds, is there no year gone by withouth a crypto exchange getting hacked? This one weaks me, will this ever stop?

This indeed will stop, but only when the process of starting the crypto exchange will be thought out and insured.
It surely is way harder to start own crypto exchange than fiat one and you know what - there are WAY less fiat exchanges that meet bankruptcy

This is old news, the hack happened a few days ago. The Bisq devs were able to fix the flaw and the exchange is already back in operation. 
For those looking for the full story, here's the article https://www.coindesk.com/hacker-exploits-flaw-in-decentralized-exchange-bisq-to-steal-250k

As long as there are hackers and there are flaws in an exchange system, funds will be stolen. Having a high security in place is a must for all exchanges but it is unlikely that hackers will be stopped all the time.

What happened to Bisq proves that even decentralized exchanges, whom most of us thought as more secure, are also prone to hacks. It's a lesson that we shouldn't trust DEX developers too much. It is encouraged that we also educate ourselves on how to read codes. No system is 100% safe.

Fortunately I never traded on that exchange - it seems to be the curse of the decent exchanges that they are hacked out of existence - it makes me wonder if it's a targeted attack, or simply and inside job?  Hopefully the majority of their coins were kept in cold or at best Luke-warm wallets.

If big exchange like Binance were hack, small exchanges is more vulnerable to hacking, at the end of the day it's just all about the security and its insurance, if the site have an insurance feature then traders if ever they lose their money, they will be refunded, just like what Binance did.

https://coinmarketcap.com/exchanges/bisq/ , it's a small exchange with less than a million trading volume, I think they are in trouble with the money they loss.

It will as long as the exchange site keeps to maintain its security but this one is a crap exchange site. That's already claimed to be the true dex but it can get hacked easily. The problem is we don't know for sure about there is a collusion by the team to create a fake story and try to run away with the funds that claimed already hacked by a hacker or not.

But I am not sure if this exchange will do the same thing as binance by returning all the money that has been lost. For that I prefer to use binance because even though hacked but my money is still returned

the reason why fraudsters commit such acts is based on big money. I mean, exchanges that have large assets are always the target of hackers. but if you are one of the victims, if you still keep the assets there or while there is still an opportunity then immediately make a withdrawal and move it in a secure wallet.

Even with a good security system, there might be instances that the problem itself is from within the team. There might be people within the team that might be responsible for some of the incidents. That is why it is never secure to keep funds within a platform.

Just hearing about this now and it is really a bad time considering the unhealthy state of the world now. I do not trade on the exchange and it looks like a smaller exchange as well, but yet, whether big or small exchange, the reality still remains and that is, no exchange is free from the eyes of hackers. I hope they get back to operations soon and users also takes more precautionary measures to ensure the safety of their assets.
Will this ever stop? I highly doubt it, because hackers are improving their skills everyday and it's left for exchanges to continuing improving their security as well.

There is not new, as long as the hackers can find any holes in the security of any exchange then they will surely rob it. There are many exchanges that got hacked in the past therefore it will be best for the exchange owners to tighten their security more or update it daily if possible because they are holding the money of their users.

Even big exchanges got hacked, so this story is not new already but I am hoping that other exchange out there will learn from this happenings and will do something to counter this hacking incident so they can provide their users a peace of mind.

You're late though, there have been thread about this hacked already.

It's good though that the hack only cost 6 digit figures, so I will say that is not that that big as compare to other centralised exchanges in which one hack can cost millions of dollars. Easy peasy for the hackers. I don't think that this kind of hacking will stop, obviously, hackers are taking advantage of loopholes and it's easy money for them. That's why we need to learn not to put huge amount of money in a exchanges so that you won't get affected.

Hackers are one step of the game, so it will be very difficult to stop this from happening. Although the hackings are 99% done on centralized exchanges, it looks like they are also targeting dex now, just like what happened in Bisq. One way to not lose funds is to practice good security on our part and don't leave your funds on exchanges specially if it's like in thousands of dollars. Withdraw it to a wallet that you have control of the private keys. So that you can sleep better at night.

There has been so many hacking and it seems all this exchanges are not learning from the mistakes of others. As long there will always be flaws in an exchange , then there will be hacking because that's what they are meant to be doing. A good exchange should take responsibility of avoiding being hacked at all cost.

   This is the first time I hear about Bisq exchange. By the news hackers exploited a significant software flaw!
It's why it's important to choose exchange with high security and without software flaws. Exchange where
team constantly work on improvements!
   At least this time we are not talking about millions of dollars in crypto-currencies! Hackers stole $250k.
For most of us it's a lot, but comparing with some previous hacks it's not much. I don't think that this hack
will disturb the market!

I don't even know this exchange exists in this market if it hasn't been hacked. This market is very dangerous and all exchanges can be hacked at any time, and we should refrain from using new and small exchanges because it is not secure.

There are loopholes everywhere no matter how much you develop. Nothing is uncrackable or say 100% secured , there are always some vulnerabilities. Therefore proper maintenance should be run to check if all systems are running fine and spot vulnerability before the hackers do.

Still I don't know but I think there is something else going behind the scene when a new exchange which no one heard of gets hacked. Is there any news if it affected any users on their platform?

This is bad. Bisq is known to be one of the good exchanges out there. I haven't noticed that they were hacked until you have posted it. I verify that several articles confirmed that they were hacked and the amount was estimatedly $250,000.
(https://securityaffairs.co/wordpress/101377/cyber-crime/bitcoin-exchange-bisq-hack.html)
(https://www.ibtimes.com/bisq-hack-250k-worth-crypto-stolen-users-2955689)

I have just heard about this exchange for the first time and there is no reason why I was surprised because the crypto market often has a lot of security issues. In fact, dozens of other past exchanges have been hacked and this is a normal occurrence. Of course, I never wanted this to happen, but I hope Bisq will be able to work again soon.

There have been so many hacked exchanges in this market, it is making me scared to use the exchanges at the present time. They can be attacked at any time and our money can disappear spectacularly. Do not hold our assets at exchanges, it is best to send them to your personal wallet or cold wallet

This hacking phenomenon, especially, for exchanges has always been in the high. This is no exception though, and unfortunately the only lesson we can all take from this unfortunate incident is that security of any online platform must be a priority and needs regular checking. As sad as it is, there will be new methods these hackers can use that's why it's imperative that safety protocol checks/updates must be done on a regular basis.

Anyway, if you want you can read more about this event here: https://www.ibtimes.com/bisq-hack-250k-worth-crypto-stolen-users-2955689

I think no, but it will make every crypto's exchanges aware that they should make a service which have a good security. Don't just make a good trading platform in the side of feature or fee that charge. The first thing if they want their trading platform be used for long time they should pay attention the security service first. A feature and low charge for every fees is a bonuses for every trader. Even for me, I will choose a platform that has a good security instead of the trading platform charge a low fees and has a good feature, it doesn't make any sense to me.

For a brief second I held my breath when I saw this thread, thinking it could an exchange I had tokens in. Well, thank goodness it isn't. These hacks are becoming ceaseless this day and that throws up a window of suspicion that the hacks could be coming from members of staff of these exchanges. I bet, they can't deny it is not an insider. People should be careful not to pile up their hodlings on exchanges. None is completely safe. Remember that Binance was also hacked in 2019.

Most of the hacking incidents are very unfortunate and should be addressed accordingly. Honestly speaking I doubt some of those incidents, I don't know why but I have a bad feeling about it. I suspected that it was a planned attack from within. I'm not a hundred percent sure, but it is highly possible. for me, it is an eye-opener for all of us that we should not let our holdings stay longer in any exchange because it is not safe and also choose the reliable and trusted crypto-exchange platform that suited for our needs.

This is sad, but likewise it is one of the reasons why we are urged not to keep our funds in exchange platforms. Always use a cold storage or paper wallet

I really feel uneasy when I see news of a hacked exchange whether I have funds or not there coz there are people that will definitely loose their hard earned funds. I don't how they set up with their exchange but if individuals could secure their wallets with 2FA Authentication, these exchanges should have a back up plan against hackers.
People should be careful not to pile up their hodlings on one exchange,
Share it to different exchanges or better still, store outside an exchange where it will be better secured.

Maybe this is just their trick to lame from the users? or indeed hacked so vulnerable to his site?
Small exchange if hit by hacks, it will be large in the amount of 250k that is brought, but is there any insurance that can make this money back?

Certainly in the future there will be more exchanges being attacked by hackers. I never trust exchanges because they're not really secure, even Binance exchanges are hacked in 2019 and it's one of the top exchanges in this market.

That is the benefit of trading with big exchange with binance. They have made fortune and have capacity to offer such when there is security bridge compare some small exchange that are still upcoming. I doubt if cryptopia did the same for their traders when they got hacked few years ago. I got lucky to have withdrawn my $1.2k before it was hacked

That's true no system is really 100% sure and safe, and with this we should realize that exchange is not the right place to keep our coins even if the exchange is one of the top exchange in the industry, always remember not your key not your money, the most secured wallet is the one that you can secure.

Many hackers the number 1 target are the exchanges because they know that in the fundd of the exchanged is million dollars and once they enter the system they will get more money. So as trader too I suggested to newbie and even professional trader to seperate the coind to the exchanged waller to the wallet for crypto become more safe . The team of exchange need secure the system they have so people will be sure that their money is safe .

I can tell you that hackers target exchanges the most, every day every minutes they are busy finding ways to break the security of any exchanges, this is why its always a bad choice leaving coins and tokens on any exchanges

I see that there are currently too many exchanges being created, many of which are done in a sloppy manner. Such exchanges are potential targets for hackers. People should choose which ones are highly rated for use.

There is safe way to choose sentralized exchange, you won't ever be comfortable to store your money there.

A good thing is depend on your intention, choose hardware wallet if your intention is for long term investment.

Choose centralized exchange when you have intention to be a trader, at least when you are a trader you will intens to see your asset on the exchange so when the bad thing come you can send all your fund to the right place.

Thank you.
You saved me the time and effort to go through all the searching that is needed just to make sure this is real.
I hope I still have Smerits so I can give you some, but sadly I don't.
But I will be back at you later if ever I will receive some.

So it had been fixed but there is still a problem which takes away some of their customers.

This won't stop until there are hackers and flaws in exchanges. Hackers are always awake to find flaws from every possible corner. When they find that flaws they target the flaws and break the security of the website. So it's helpful to always have insurance. No exchange is safe from them, whether it's a decentralized or centralized exchange. So don't keep you fund in exchange all the time. Use wallet like ledger, cold wallet etc.

Bisq is well respected exchange & too bad to hear it's hacked.
This endless drama of crypto exchange hack will not end only if the exchanges put a decent portion of their money into securing the funds (cyrpto) of their customers.
I know that there is nothing as 100% secure but at least make i harder & harder for hackers to hack them

This is the first time I've heard of such an exchange. However, if you want this to stop in the future, use only user-verified crypto exchanges.

Bisq is operating normally for some time now. They even cant prevent trading since it is decentralised exchange. For a day before they managed to patch bug they advised all traders not to trade.

No single exchange is impenetrable, either decentralized or centralized hackers are going to keep stealing coins from these exchanges, presently there is no way to prevent this successful, all we have to do is always make sure we keep our coins in wallets that have private keys and only send tokens to exchange for sell or swap

We never know, that is depending on the site, some put an insurance some did not and there are actually few exchanges in the past that close their business after they got hack, and we can't really tell if it's a real hack or there is an inside job, we will have to wait for the result of the investigation of it's made public, but on this site, there's no news yet that they will close.

I don't really believe all these tales of cryptocurrency exchange hacks. I think the exchanges may be lying. Perhaps there was no hack but they were only looking to escape with users funds and capitals. Let us investigate these exchanges and not let this go just like that. It might be fraud been perpetuated by the exchanges themselves.

realy sad for the people who lost their money in this case , but also a good lesson for all the new people who just get in crypto and i am sure some people who are some longer in the scene , use the exchange to change coins and value but never use them as a wallet  or a bank , alway's keep your coins safe in your own wallet , because it CAN happen

Never traded on Bisq, but seems like the hacker exploited a loophole they had. I've only traded on Blocknet's DEX, which to this date never have been hacked, and hopefully never will, due to their decentralized network. Nodes are hosted by masternodes, so you'd have to be able to somehow take control of those to route transactions elsewhere, which is highly unlikely.

From what I could read, the only coins taken was XMR though.

A year without an exchange getting hacked? That's truly up to no one, OP.
There is no such thing as perfect security, because in the end someone made the whole system itself and that creator has the control of it, that's why we can't say that even such exchange that allows 2fa is secured.
Hopes up that the hackers won't have the same mindset as the exchange devs.

I am in crypto space from 2018, sadly I haven't seen a single year without crypto exchange hacked. It's very hurtful that people are losing money by trusting on the exchange, Maybe this is why everyone suggests to withdraw your funds from the exchange after every successful trade. I think only Bittrex has the most secure system, otherwise, ignore all exchanges for storing coins.

Hmmm I have seen this exchange being mentioned at times on this forum, and some people have also tagged it as one of the best exchanges. I'm surprised that they got hacked. Anyway that's like a normal thing. Only few exchanges has been able to stand strong against these hackers.

But at this time, I expect exchanges to be working hard in the area of security and keep their platforms safe for users and also save their businesses. They have seen what happened to other exchanges that got hacked, and how they spiraled down to their end, so they shouldn't be joking with this and should work hard on it. I hope that others learn from this and stop putting people's money at risk.

 ;D ;D lol, i am still laughing by reading all the replies because most of the users don't read the main announcement of that incident and also don't care what type of exchange is that. Most of the users are just typing like "Don't trust centralized Exchange" ,"Use Personal Wallet" ,"No exchange is safe" , "Binance is best" blah blah blah  ;D ;D . Really guys, this is rediculous  ;D ;D . First try to read  ??? ??? what's happened with that exchange and what type of exchange is that, then start replying.

Here is some information about that exchange: Bisq is a p2p exchange which devs are trying to move on in decentralized system. They used a 3rd key in the multisig escrow (specially for BTC) so that all transections of users can be safely done in their exchange. As it's a p2p exchange, they won't be able to recover all the funds whch is lost by the incident. Just look at the statement of their their blog post. Anyone can read that clicking here. (https://bisq.network/statement-security-vulnerability-april-2020)
Always try to read everythings first, bro.  8)

Specially thanks to @Bttzed03 for informing the right things.

You are confusing something.
Hackers cannot steal money from a decentralized exchange since users there interact directly without intermediaries, this is the point of such exchanges.
However, hackers can create a clone of such an exchange, provoking the user to conduct a transaction with a fake wallet.

In addition to your statement no exchange site (either centralized or decentralized) is ever secure and i think this is the part people seems not to understand that the benefit of decentralized exchange site the no KYC implementation and that does not justify it be some kind of bullet roof to attack.

Am I the only one who thinks negatively about hacking exchanges caused by a third party? I mean, a person or one of them. on the one hand I think the exchange is very difficult to hack, the vision of the exchange itself is to secure user assets. but if not, then why is the exchange easy to hack? but I hope I'm wrong in judging this.

This should be a lesson to all the community newbies as not to keep your funds in any exchange. Exchanges without good reputation by the community members should be seen as a threat to those who don't want their funds to get lost. From the beginning of the cryptocurrency world was these types of hacks and the hacks continues, we should be careful about our funds. Any exchange that keep your private keys tends to take control over your savings.

At least, look at the good side of the hack news. The frequency of hack news dropped a lot after the last ATH in 2017. The Bisq is not the biggest and probably the team didn't take the security flaws seriously in bug bounties.

This will not stop, there will always be "unscrupulous" people who try to benefit by doing inappropriate ways. This kind of crime we often encounter in the real world too, right? just think of pickpockets. We also have to realize this is part of the risk when involved with the world of crypto, don't make this fear, make it the motivation to do the best strategy and security for your assets. Choose an exchange that is truly trusted, they will certainly provide compensation and take responsibility if there are things that are detrimental to their users.

During 2019, several exchanges were hacked, including the top global exchanges. Some of them have a significant influence on the market. This can be repeated, so be wise in protecting your assets.
https://i.postimg.cc/V6X1FW6Z/exchange-hacked-2019.jpg
_{source: https://t.me/ico_analytic/1385}

Never heard of this exchange though anything whether it is a small or big exchange there is still a risk of getting hacked, actually, the bigger ones even though they have high security for sure they are the ones who will be the main target of hackers. For me, binance did their part when it got hacked that all funds are SAFU.

The thing about hacks is not about how it affects the market but the affected users and what this means for other users who were not victims. It might not be a big deal to you because you're not on the losing end. Also, Its not about using a 'high security' exchange. In reality, every software can be hacked.  Hacking doesn't only involves exploiting the software but also the underlying operating system (Windows, MacOS, Android, etc), the hardware or even the people using it.

I've seen cases of people's wallet getting hacked.

well although they try to provide good scripts in the software but I am sure the creators of the software have a special trick to get into the software as an admin and can take assets that use any trading software, so when trading it really should not need to use a tool or other software.

From an article over at CoinDesk:

"The value of the crypto stolen was roughly $22,000 worth of bitcoin (BTC) and $230,000 worth of monero (XMR), according to CoinDesk data at press time. In total, that comes to more than $250,000."

From what I understand it's very difficult to get a hold of the master nodes, and or be apart of the dispute process (being the judge and the jury). In this case it looks like the attacker exploited the trading platform by using a loophole.

No doubt, the entire cryptocurrency exchange markets have been innovative over the years with their ever inventory features aimed at making the trading of cryptocurrency an amazing endeavor but they've all seems to loose control of one important aspect which is the security of their platform, this is so as even the biggest of exchanges such as binance have had their fair share of hack experience. I can't help but implore exchange providers to make their architectures so secure that they will leave no loopholes for hackers to prey on

Not many exchanges can do what Binance did. Most crypto exchanges don't have SAFU in place. I guess, small or big exchanges should start thinking of this kind of insurance fund. Because hackers are getting aggressive, they don't classify it as small or big, as long as they can acquire money from it. Though I never had the chance to use that exchange, but this is the major reason why you should not store your coins in the exchange. I know you've heard that many times, but people need to remind every time this unfortunate event happens.

This hack will not stop believe me, I'm saying it because I have strong point. All old exchange can't survive for long time, where new exchange will take this place. Any new exchange hasn't any hack experience, how to protect an exchange. Hack means some limitations, every exchange has something, just smart people find it after long time work. My suggestion is New exchange should take help from old exchange.

These hacks are just getting  too much with each passing day and i can confidently say this happening is very dangerous to the current state of the market as we are hoping for a more of a stable market since the dump cause by the global crisis of the pandemic. I think every exchange should brace up their security against these hacker, like it's been a decade since this has been happening amd yet there isn't a go-to approach to make exchanges more secure.  I feel for the thousands of user who will lose assets to this hack during this difficult time as everyone is bracing up to see the end of the tunnel of this whole global pandemic

Even though the exchange has a good reputation, it can still be hacked, as was the case with binance at the time, but fortunately I have disbursed all my assets to my personal wallet when the problem occurred, so for now it's better to secure every asset in the wallet that has been in provide, and save assets in that market are not recommended because it is very risky

It's an unending story. Hackers can hacked some crypto exchanges and no one can ever prevent that. I remembered Binance before, but they acquire all the responsibilities and return the hacked btc to the users. However, I wonder how Bisq reacts to this situation. Will they compensate and be responsible for the lost and hacked coins? Or will they just exit?
 
 Ols or new exchanges cannot escaped this bad experience, hacking issues. But if these happens, their security would always be at question.

It is always good to safeguard our asset in our personal wallets, of course, a trader will always hold some funds in the exchange for their trading activity. Even though Binance got hacked, but they fairly distributed the lost funds from their #SAFU funds, there are many other exchanges who didn't share funds to their when they got hacked. That's why it is always good to stay with the securities exchange like penance.

Even binance got hacked, the most respected crypto exchange in crypto universe, this mean that anything can happen to any exchange at any time, the wisest move is never to leave funds on exchanges

In Bisq situation it didnt really have that issue of stored funds being hacked but the way transactions being intercepted since this is p2p then
that flaw does really give out effect.I didnt even expect for that thing to happen yet we know that Bisq is a dex but hackers do able to find ways
on exploiting it that simply means nothing is unhackable.So far, there are no announcement in regards about compensation.


Its always been suggested but there are people who do still ignore this basic stuff.

what will you expect these days, hackers target are the exchanges where they can steal a lot of money if they successfully enter thsy cabn easily send the exchnage fund into the hackes account.

I imagined! How a whole exchange get hacked, then could that be due to the safety ignorance of the account managers or what actually made the account vulnerable because I believe it Should be handled by experts. What will now be the lots of all those who have the coin with them.it was like binance was also a victim of hackers sometimes ago.. something has to be done as all this are not good record for the image and progress of cryptocurrency.

hacking on exchange is normal but it is really weakening if your one of those users who got hacked but you can be fine if ever the exchange decided to refund you but i think that is rare and they will also refund by some percent and not the total amount that you have left before the hacking begun .

the hacking wont be stop . small or big exchange is not exempted to this  but the exchange that have been hacked before should know if what they are missing out on thier security and they can improve it to prevent the same situation

Greatfully, binance can solved the problem and pay back all money that has stolen. That is the important thing, as long as the exchange can be able to give the money back then we will be fine with the exchange. The worst thing is an exchange can't be able to replace the user-owned money.

Because as we know the chance for the exchange getting hacked is 80% although we have considered that security exchange is good but there will be a chance to pass it. A security was made by human through the technology and we know either that hackers is human as well he will know what everyone done especially if they do the same thing.