[2017-10-06]Bitcoin Exchange Denies Getting Hacked After Customers Lose $3 Milli

[vit05]

https://www.bleepingcomputer.com/news/security/bitcoin-exchange-denies-getting-hacked-after-customers-lose-3-million/

OKEx, a Bitcoin exchange based in China, issued a statement over the weekend, denying it was hacked and blaming recent thefts on careless users who didn't secure their accounts.

Rumors that hackers breached OKEx started since the end of August when several users began complaining about funds disappearing from their accounts.

Victims reported losing a collective of over 600 Bitcoin, worth around 20 million Chinese yuan, at the time of the thefts, or around 3 million US dollars today. One user alone reported losing over 200 Bitcoin. Users reported seeing German IPs logging into their account just before the thefts.

Exchange says only a few users affected. Not general hack.
Most victims are OKEx customers, but some OKCoin users reported similar thefts. OKEx and OKCoin are sister sites, managed by the same Chinese company.

Both OKEx and OKCoin have denied getting hacked.

"OKEx was NOT hacked. All client assets are safe and sound," said Lennix Lai, Director of Financial Market at OKEx and OKCoin.

The company said it believes that hackers compromised just a few individual customer accounts, either due to poor security or after the owners fell for phishing attacks.

Company recommends turning on 2FA
Following the negative publicity, OKEx published a statement on the incidents, reminding customers to enable two-factor authentication (2FA) for their accounts.

According to CoinMarketCap, OKEx is ranked the 46th most popular exchange by volume, while OKCoin is ranked 16th. Based on Bitcoin transactions alone, OKCoin is ranked as the sixth largest exchange in the world.

Chinese news agency JRJ, who first reported the incidents, points out that China has banned Bitcoin trading, meaning victims can't go to the police to report and investigate the thefts.

Over the weekend, it also came to light that hackers compromised the website of the Etherparty ICO and switched the ICO wallet address, tricking users into sending funds to the wrong address. Etherparty said it would compensate affected users for their losses.

[1714118700]

1714118700

[Rahar02]

Why now? This news published on October 3rd and this exchange hacked since the end of August, maybe they want to cover this problem without any further damage to entire bitcoin environment just like when Bitfinex hacked and lost BTC120,000.
BTC600 is a big amount according to current exchange rate, even though just few customers account got hacked, as long as the users didn't fell to pishing act, it's the exchange responsibility.

[btc_angela]

Why now? This news published on October 3rd and this exchange hacked since the end of August, maybe they want to cover this problem without any further damage to entire bitcoin environment just like when Bitfinex hacked and lost BTC120,000.
BTC600 is a big amount according to current exchange rate, even though just few customers account got hacked, as long as the users didn't fell to pishing act, it's the exchange responsibility.

Maybe this is the very reason why the Chinese started to ban ICO and closing their local exchanges. And look at the timing. End of Aug this hacked happened. Beginning of Sept, China took a hardline against bitcoin. I truly believed that this is one of the reasons why they close the exchanges. Customers get hacked, complaint to their government, then Chinese took drastic and swift actions to close them all. Makes sense to me now on why that sudden moved by them.

[cpfreeplz]

One customer lost 200 bitcoins and in total there was $3million hackrd? Obviously the exchange didn't get hacked, the customers' accounts did. There's a massive difference there. If you don't secure your password and your 2fa is something easy to hack (like SMS) you're shooting yourself in the foot.

This is assuming you're dumb enough to even leave that much on any exchange. They aren't a bank ffs. When will newbs learn.

[albert.fleming]

There are many social engineering techniques on the web, but which one is capable against OKEx that made it lose $3 Millions from customers? Shouldn't they have some security regulations or infrastructure for such common attacks? Or they are pulling their hands out of it?