Cryptopia hack

[Saint-loup]

[Saint-loup]

Anyone with information which could assist the investigation can contact police by email at crypto@police.govt.nz

https://www.police.govt.nz/news/release/update-investigation-involving-cryptocurrency-company

[Saint-loup]

13 millions de $ auraient été dérobés...
Des fonds ont été bougés vers binance et coinexchange

 https://cointelegraph.com/news/cryptopia-alleged-hack-police-are-on-the-case-while-community-tracks-down-stolen-funds

$13,000,000
stolen

From a r/Cryptopia thread:

r/Cryptopia
•Posted byu/toldjahP
1 hour ago
Cryptopia Hack analysis (min. $13,000,000 stolen)

Hi there


I checked etherscan and collected some informations below. In total min $13,000,000 were stolen.


Transfer of 19,390 ETH from Cryptopia ($2,468,043) (Jan-13-2019 01:30:35 PM +UTC): https://etherscan.io/tx/0x8a7c2b34f23eee02401e7c3fa1ea2ce8d3132e7ca3811d673ca35898c9535aae


Transfer of 48,029,305 ($1,072,362) CENNZ (Jan-13-2019 01:40:17 PM +UTC) Wallet is tagged as Cryptopia Wallet by Whale Alert: https://etherscan.io/tx/0x31a58df14ea3420878267e2b9cdd242d983b5298ef48c5cd9a799ed10605f393


Transfer of 3,844,247,574 ($304,181) DAPS (Jan-13-2019 01:40:17 PM +UTC): https://etherscan.io/tx/0x61b2ca4911750eb3278945f80e0c3f8a7f94578ba20b0e9240e5a86faaa166ae


CENNZ and DAPS where transfered to https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224 which is not the same adress where the ETH went on. But later this adress made a transfer to the ETH adress https://etherscan.io/address/0xc8b759860149542a98a3eb57c14aadf59d6d89b9 (which is the adress the ETH went).


Token Balance 2. adress: ($11,072,793) https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224


Please help to collect further details.

[dablatair]

13 millions de $ auraient été dérobés...
Des fonds ont été bougés vers binance et coinexchange

 https://cointelegraph.com/news/cryptopia-alleged-hack-police-are-on-the-case-while-community-tracks-down-stolen-funds

$13,000,000
stolen

From a r/Cryptopia thread:

r/Cryptopia
•Posted byu/toldjahP
1 hour ago
Cryptopia Hack analysis (min. $13,000,000 stolen)

Hi there


I checked etherscan and collected some informations below. In total min $13,000,000 were stolen.


Transfer of 19,390 ETH from Cryptopia ($2,468,043) (Jan-13-2019 01:30:35 PM +UTC): https://etherscan.io/tx/0x8a7c2b34f23eee02401e7c3fa1ea2ce8d3132e7ca3811d673ca35898c9535aae


Transfer of 48,029,305 ($1,072,362) CENNZ (Jan-13-2019 01:40:17 PM +UTC) Wallet is tagged as Cryptopia Wallet by Whale Alert: https://etherscan.io/tx/0x31a58df14ea3420878267e2b9cdd242d983b5298ef48c5cd9a799ed10605f393


Transfer of 3,844,247,574 ($304,181) DAPS (Jan-13-2019 01:40:17 PM +UTC): https://etherscan.io/tx/0x61b2ca4911750eb3278945f80e0c3f8a7f94578ba20b0e9240e5a86faaa166ae


CENNZ and DAPS where transfered to https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224 which is not the same adress where the ETH went on. But later this adress made a transfer to the ETH adress https://etherscan.io/address/0xc8b759860149542a98a3eb57c14aadf59d6d89b9 (which is the adress the ETH went).


Token Balance 2. adress: ($11,072,793) https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224


Please help to collect further details.

Ha oui ca grimpe encore... C'est plié pour Cryptopia et franchement même pour les autres utilisateurs non volés je ne serais pas serein.

[debutant]

C'est mort de chez mort ! Le site risque d'être down à tout jamais

[EtienneL]

aucun accès possible actuellement on est d'accord ? pour récupérer ce qui est récupérable...

[ginette]

aucun accès possible actuellement on est d'accord ? pour récupérer ce qui est récupérable...

Non. Pas pour le temps de l'enquête j'imagine. Comme dit debutant c'est possible qu'il ne rouvre jamais. Voici un historique des différents hacks, certains exchanges ont survécu, d'autre non...

[EtienneL]

Ok merci... bon bah on verra si je retrouve mes cryptos un jour....

[kenzawak]

Plus d'infos (en gros, Cryptopia a bien merde et ce n'est pas fini) :

https://elementus.io/blog/cryptopia-hack-transparency/

"All times below are Eastern Time (GMT-5).

Sunday 13-Jan, 8:28am: Funds begin moving out of Cryptopia's two core hot wallets, one holding ether and the other holding tokens.
Sunday 13-Jan, 11:58pm: With the core wallets empty, residual quantities of funds begin leaving Cryptopia's 76k+ secondary wallets, a process that would continue for several days.
Monday 14-Jan, 6:00am: Cryptopia suspends trading, announcing they are undergoing unscheduled maintenance.
Tuesday 15-Jan, 3:00am: Cryptopia discloses the security breach and New Zealand law enforcement steps in.
Thursday 17-Jan, 5:58am: The last of Cryptopia's funds are drained.

[Yaplatu]

Ah oui c'est violent, ils se sont fait dépouiller 

[kenzawak]

Ah oui c'est violent, ils se sont fait dépouiller 

Le pire c'est que des gens ont continue a deposer des fonds sans etre au courant de la faille.

[cestmoi]

Je vais voir si je peux aller faire un tour a Cryptopia pour voir ce qui ce passe.

C'est vraiment la lose pour eux. Et il y a peu de chance qu'ils s'en remettent.

[chem96]

par contre pas de trace de BTC. ils semblent qu'au moins ils aient pu sauver ça

[dablatair]

Plus d'infos (en gros, Cryptopia a bien merde et ce n'est pas fini) :

https://elementus.io/blog/cryptopia-hack-transparency/

"All times below are Eastern Time (GMT-5).

Sunday 13-Jan, 8:28am: Funds begin moving out of Cryptopia's two core hot wallets, one holding ether and the other holding tokens.
Sunday 13-Jan, 11:58pm: With the core wallets empty, residual quantities of funds begin leaving Cryptopia's 76k+ secondary wallets, a process that would continue for several days.
Monday 14-Jan, 6:00am: Cryptopia suspends trading, announcing they are undergoing unscheduled maintenance.
Tuesday 15-Jan, 3:00am: Cryptopia discloses the security breach and New Zealand law enforcement steps in.
Thursday 17-Jan, 5:58am: The last of Cryptopia's funds are drained.

...



...

How much have the thieves attempted to cash-out at exchanges?


...

Of the $16m that was stolen, the vast majority (~$15m) remains in two wallets controlled by the thieves:

0x9007a0421145b06a0345d55a8c0f0327f62a2224
0xaa923cd02364bb8a4c3d6f894178d2e12231655c)

...

The hack continued for days after Cryptopia discovered the breach.

...

After Cryptopia discovered the hack, they watched the funds continue to flow out of their wallets for four more days, seemingly powerless to stop it. As these wallets were not smart contracts, there should have been no technical complications preventing Cryptopia from securing the funds.

The only plausible explanation for Cryptopia's inaction is that they no longer had access to their own wallets.

It seems Cryptopia not only lost their funds, they also lost access to all, or nearly all, of their 76k+ Ethereum wallets.

One possible explanation is that Cryptopia had their private keys stored in a single server with no redundancy. If the thieves managed to gain access to this server, they could have downloaded the private keys before wiping them from the server, leaving Cryptopia unable to access their own wallets.

...

2,000 Ethereum wallets and $46k in Ether remain at risk.

We count about 2,000 remaining Cryptopia wallets holding a combined balance of ~380 ETH (about $46k). Most of these funds were deposited by Cryptopia users after the initial hack took place, apparently unaware of the security breach."

Bonjour,

Ce que tu détailles est encore plus hallucinant de la part d'un exchange comme cryptopia, comment n'avoir pas réussi à bloquer plus tôt la fuite, pourquoi n'avoir pas bloqué plus tôt les dépôts, comment ne pas bloquer au moins depuis la maintenance tout withdrawals...

Ca fait vraiment amateur ou plutôt laisser faire.

[Saint-loup]

Police making progress in crypto-currency investigation
Tuesday, 22 January 2019 - 5:23pm
National News
Police continue to investigate the unauthorised transfer of crypto-currency worth a significant sum from Christchurch-based crypto-currency trading company Cryptopia on 13-14 January 2019.

Good progress is being made and positive lines of enquiry are being developed to identify the source of the transfer, and to identify where the crypto-currencies have been sent. The assistance of the crypto currency community is being sought as the investigation progresses.

This is a very complex investigation, involving expert digital forensic investigators from within New Zealand and in various overseas jurisdictions, as well as overseas authorities.

Members of the investigation team met with Cryptopia management and staff yesterday and today and outlined progress in the investigation.

Cryptopia management and staff have been co-operating with Police and providing considerable assistance in the investigation. 

The investigation is expected to take some to time complete, and the digital forensic team will be on-site at Cryptopia’s premises for some days to come.

Anyone with information which could assist the investigation can contact police by email at crypto@police.govt.nz (link sends e-mail).

ENDS

Issued by Police Media Centre

http://www.police.govt.nz/news/release/police-making-progress-crypto-currency-investigation

[Testeur1450]

ils ne peuvent pas ne pas rembourser les gens qui ont des coins sur leur exchange
ca serait du vol

pdt ce temps les coins qui sont trade sur cette exchange se cassent la gueule

[ginette]

Les problèmes semblent se poursuivre chez Cryptopia. 17000 wallets ETH contenant l'équivalent de 180k $ auraient été vidés hier. Il y a donc de très forte chances que Cryptopia ait perdu l’accès aux clés privées de ses wallets Ethereum. L'affaire est loin d'être finie...

Source: https://journalducoin.com/altcoins/cryptopia-hack-17-000-wallets-siphonnes-15-jours-apres-le-piratage/

[Eric01120]

oui j'avais lu qu'ils ont perdu les accès aux clés privées de certains comptes. Les hackeurs peuvent maintenant prendre le temps de vider les wallets tranquillement!

Entre l’enquête et ça, nous ne sommes pas prêt de pouvoir récupérer ce qu'il reste sur nos comptes....

[mickaelsilver10]

Je pense comme beaucoup ici que cet exchange ne s'en remettra pas !! Ca commence a faire beaucoup ...

Et ca nous montre qu'il ne faut rien laisser sur ce type d'exchange, même si cela peut avoir un coté pratique

[kenzawak]

Je pense comme beaucoup ici que cet exchange ne s'en remettra pas !! Ca commence a faire beaucoup ...

Et ca nous montre qu'il ne faut rien laisser sur ce type d'exchange, même si cela peut avoir un coté pratique

Il y a une startup nommee Arwen qui veut mettre en place un systeme d'escrow pour ceux qui veulent garder leurs tokens sur des echanges centralises.
Kucoin et d'autres sont interesses.

https://news.bitcoin.com/arwen-enables-self-custody-for-traders-of-centralized-crypto-exchanges/

"Boston-based startup Arwen (formerly Commonwealth Crypto) announced on Jan. 28 the release of its testnet trading application. The company aims to bring atomic swaps to mainstream cryptocurrency trading with its technology. Using the service, traders can deposit their coins in an onchain escrow, rather than with an exchange, removing the need to trust the centralized venue to handle the money. This allows them to maintain custody of their coins while trading on a centralized exchange without having to transfer coins to the exchange’s omnibus wallet or their keys to a third-party web server."