Hacked Exchanges since 2011

[VB1001]

The main page was updated, a new presentation design with all the included data separated by year,
if you see any error, do not hesitate to communicate it.

[1714995528]

1714995528

[1714995528]

1714995528

[Dabs]

One of your posts (second one) includes only Bitcoin Core as software.  I think some other wallets could be included as part of that list, namely Electrum, latest version, downloaded from official website, verified signature and file hash. Also Electrum for Android since it's the same except for mobile phones / tablets. Might as well mention Bitcoin Wallet for Android.

With a note that, do not download any updates except from official website or Google Play store. There was a recent phishing attempt, but it has been fixed by preventing showing links in server messages. Still, no one would have gotten their coins stolen if they only checked the official websites and not clicked on a pop up message.

[VB1001]

^
I thought about including scams or vulnerabilities of the wallets, but I think it is better to focus the thread only in the exchanges, but if there is any important news on this subject, it can also be published in the thread.

But this type of news is published quickly in several sections of the forum.
Anyway thanks for your suggestion.

[VB1001]

The popular blockchain analytics company, ChainAnalysis, recently posted a review of how 2019 related to previous years in terms of cryptocurrency exchange hacks. The data reveals an increased number of attacks, but less stolen money compared to 2018.

https://cryptopotato.com/report-more-cryptocurrency-exchanges-hacked-in-2019-but-less-money-stolen/



Very complete report, the final part refers to the techniques used to steal the funds and how they prepare the strategy for hacking:

ChainAnalysis https://blog.chainalysis.com/reports/cryptocurrency-exchange-hacks-2019

[VB1001]

https://www.cryptocompare.com/exchanges/#/overview

Read the Cryptocompare Exchange Benchmarking
https://www.cryptocompare.com/media/35650785/cryptocompare_exchange_benchmarking_2019_06.pdf

Cryptocompare exchange review
https://www.cryptocompare.com/media/36639870/cryptocompare_exchange_review_2019_11.pdf

The Cryptocompare portal has some interesting reports where they explain how they evaluate the exchanges, in the portal you can select the list of exchanges by centralized, decentralized, by country and some more variables to order the presentation to your liking.

The reports are quite extensive, but they provide a lot of data, reading them will not save us from possible hackers in an exchange, with the information they present we have an "approximate" idea of ​​the veracity of volume or liquidity of the exchange.

[Barbut]

https://www.cryptocompare.com/exchanges/#/overview

Read the Cryptocompare Exchange Benchmarking
https://www.cryptocompare.com/media/35650785/cryptocompare_exchange_benchmarking_2019_06.pdf

Cryptocompare exchange review
https://www.cryptocompare.com/media/36639870/cryptocompare_exchange_review_2019_11.pdf

The Cryptocompare portal has some interesting reports where they explain how they evaluate the exchanges, in the portal you can select the list of exchanges by centralized, decentralized, by country and some more variables to order the presentation to your liking.

The reports are quite extensive, but they provide a lot of data, reading them will not save us from possible hackers in an exchange, with the information they present we have an "approximate" idea of ​​the veracity of volume or liquidity of the exchange.

If you wish to save yourself from a possible hack and losing funds you have on some exchange you can do only two things, withdraw your funds when you finish with trading or use a decentralized exchange. Withdrawing funds after trading can be expensive, fees are high! Decentralized exchanges are slow with their low volumes. What is better to do, risking with leaving funds on an exchange, or being slow on dex but safe is a question for each of us.

[The Sceptical Chymist]

Jesus, I've been around long enough to know there were quite a few exchanges that got hacked but I apparently missed this thread and didn't realize there were so many.

Sometimes I've wondered whether some of these so-called hacks were real, or if they were cases of exchange employees pulling inside jobs and stealing funds.  That's what happened in Cryptsy's case if I'm not mistaken, and in any case if you're an exchange, claiming you got hacked provides the perfect cover for an exit scam.  I have no doubt real hackers try their hardest to steal coins from exchanges, but you'd think that in such a tech-oriented business these exchanges would know a thing or two about security.

I don't do much trading, but I do still buy some altcoins occasionally and even though I trust the exchange I typically use, there's no way in hell I'd keep coins on it for more than a day.  It causes me anxiety to do so, I kid you not.

[VB1001]

It causes me anxiety to do so, I kid you not.

It's true, you only have this feeling when you really know what can happen at any time.
And even if their exchange is not pirated, they can also close it and disappear forever.

"Not your keys, Not your Bitcoin"


Bitspark Shuts Down Amid Restructuring, Coronavirus and Protests

Hong Kong-based blockchain remittance startup Bitspark has abruptly announced its closure, citing internal restructuring issues.

On Feb. 3, Bitspark co-founder and CEO George Harrap officially announced the platform’s plans to shut down its services on March 4, 2020.

According to the statement, Bitspark users will be able to withdraw their cryptocurrencies from Feb. 3 to March 4 as the platform’s functionality will stay intact over the period. After March 4, account logins will be disabled for a period of 90 days, with users being able to withdraw their funds via Bitspark customer support, the announcement reads.

https://cointelegraph.com/news/bitspark-shuts-down-amid-restructuring-coronavirus-and-protests

[gentlemand]

I have no doubt real hackers try their hardest to steal coins from exchanges, but you'd think that in such a tech-oriented business these exchanges would know a thing or two about security.

I'm sure most 'hacks' are the owners stealing but one of the biggest of all was Coincheck and that hack was entirely down to them keeping everything that was taken in a hot wallet. They had the free and fully integrated option of multi sig but didn't even do that, let alone pay up to $80 for a Trezor that would've saved them a few hundred million dollars.

Here's a fresh one - https://twitter.com/altsbit/status/1225319347687653377

Note the wording - 'A small part of the funds are safe on cold wallets.'

That feels like the wrong way round.

[VB1001]

https://twitter.com/altsbit/status/1225319347687653377

We start with the hacks of 2020.

When I have more data, I will update the information with the value of the stolen figures.

Thx. for posting it in the thread @gentlemand

[Bitcoins101]

Going through this exchange hack list, quite really sad.
Let's avoid storing funds in exchanges, exchanges should solely be for trading, funds should be stored in non-custodian wallet. Fortunately some good wallets support Multi-assets and exchanges, few like exodus, trust, atomic.

More coins have likely been lost in users' own wallets than at exchanges. For people that aren't highly knowledgeable, I think storing coins on a reputable, regulated exchange is preferable. Of course, most of the coins over the years have been lost by highly knowledgeable people - early users. Storing your coins yourself also involves physical security. Protecting your storage device, as cryptocurrency-specific storage devices have notoriously poor physical security. And of course protecting your seed.

[dunfida]

I have no doubt real hackers try their hardest to steal coins from exchanges, but you'd think that in such a tech-oriented business these exchanges would know a thing or two about security.

I'm sure most 'hacks' are the owners stealing but one of the biggest of all was Coincheck and that hack was entirely down to them keeping everything that was taken in a hot wallet. They had the free and fully integrated option of multi sig but didn't even do that, let alone pay up to $80 for a Trezor that would've saved them a few hundred million dollars.

Here's a fresh one - https://twitter.com/altsbit/status/1225319347687653377

Note the wording - 'A small part of the funds are safe on cold wallets.'

That feels like the wrong way round.

The question is, are they really that dumb enough or just simply making this as a cover up into their inside job? Why they cant really just consider on putting most of funds on cold storages?

I dont really buy that kind of words from them.Im not that familiar with that Altsbit name though but this start of the year with another exchange been hacked then it isnt really already
a surprising news.Wondering on whose would be the next on line.?

[DaveF]

There were also a few small ones that got "hacked"
I will post some more if I can find my notes but off the top of my head I know this one:

allcrypt was back in 2015 : https://bitcointalk.org/index.php?topic=992176.0

-Dave

[mann1983]

https://www.quora.com/What-are-the-most-well-known-cryptocurrency-exchange-hacks

can check this link for an overview

[DaveF]

And lets add this one for 2020.

https://altsbit.com/

Never actually heard of them but popped up on my Twitter feed.

Someone should probably just keep a thread with all the hacks in alphabetical order so it can be scanned.

-Dave

[Last of the V8s]

altsbit one was 'claimed'
https://twitter.com/LulzSec/status/1226018613666041857?s=20

We assure that @altsbit didn't had proper security to stop Lulz Canon. Many others to follow. Better Stack up the Security - Note to other Exchanges  #ForTheLulz

[VB1001]

And lets add this one for 2020.

https://altsbit.com/

Never actually heard of them but popped up on my Twitter feed.

-Dave

@gentlemand warned a few days ago about the hacked of Albits, It is already included in the 2020 list, since that day.


Now some details of the stolen coins have been published:

An update on the company's website now indicates that "fortunately a good part of the coins were kept on cold storage" and that it will issue partial refunds, not having the wherewithal to fully compensate users.

The cryptocurrencies taken in the hack are now listed as:

Bitcoin (BTC): 6,929 lost out of 14,782 held
Ether (ETH): 23,210 lost out of 32,262
Pirate Chain (ARRR): 3,924,082 lost out of 9,619,754
Verus Coin (VRSC): 414,154 lost out of 852,726
Komodo (KMD): 1,066 lost out of 48,015

The site indicates that users who saw losses must apply for their partial refunds. The bitcoin and ether stolen are valued at around $63,000 at press time.

https://www.coindesk.com/new-crypto-exchange-altsbit-says-it-will-close-following-hack

[VB1001]

Someone should probably just keep a thread with all the hacks in alphabetical order so it can be scanned.

Code:

Exchange	      Hacks/Year      Hacks/Year      Hacks/Year

796Exchange 		1/2015
Altsbit			1/2020
Android RNG bug		1/2013
Bancor			1/2018
basic-mining		1/2013
Bidextreme		1/2013
Binance			1/2019
Bips 			1/2013
Bit LC			1/2013
bitcash.cz		1/2013
Bitcoin Gold		1/2018
Bitcoin Rain		1/2013
Bitcoin7		1/2011
Bitcoinica		3/2012
Bitcoins Norway		1/2019
Bitcurex		1/2014		1/2016
Bitfinex		1/2015		1/2016
Bitfloor		1/2012
BitGrail		1/2018
Bithumb			1/2017		1/2018		1/2019
BitMarket		1/2019
Bitomat.pl		1/2011
BitPay			1/2014
Bitpoint		1/2019
Bitrue			1/2019
Bitsane			1/2019
Bitstamp		1/2015
BTC Guild 		1/2013
BTC-e			1/2012
BTER			1/2014		1/2015
Canadian Bitcoins	1/2014
Coinapult		1/2015
Coinbene		1/2019
Coincheck		1/2018
Coinmama		1/2019
Coinrail 		1/2018
Coinsecure		1/2018
Cointrader		1/2016
Cryptopia		1/2019
CryptoRush		1/2014
Cryptsy			1/2014
Dec. Sheep Market	1/2013
DragonEx		1/2019
Flexcoin 		1/2014
Foxbit 			1/2018
Gatecoin		1/2016
GateHub			1/2019
GBL			1/2013
inputs.io		1/2013
Just-Dice		1/2013
KipCoin			1/2014		1/2015
Liqui Crypto		1/2019
LocalBitcoins		1/2015
Mass MyBitcoin		1/2011
MintPal			1/2014
Mooncoin		1/2011
MTGOX			1/2011		1/2014
MyBitcoin		1/2011
Nicehash		1/2017
OKEx			1/2017
Ozcoin 			1/2013 
PicoStocks     		2/2013 
PlusToken Ponzi		1/2019
Poloniex		1/2014
QuadrigaCX		1/2019
Shapeshift		1/2016
Silk Road  		1/2013		1/2014
Ubitex			1/2011
Upbit			1/2019
Vircurex		1/2013  
Yapizon			1/2017
Youbit			1/2017
Zaif			1/2018
ZigGap			1/2013

I have made a very simple list, the exchanges are sorted alphabetically and then, the number of times they have been hacked per year.

It is added to the main page. https://bitcointalk.org/index.php?topic=5090869.msg48946980#msg48946980

Thanks for the suggestion, @DaveF

[VB1001]

IOTA Network Has Been Hacked and Funds Stolen, AGAIN!

It appears as if IOTA, the blockless network, has been attacked, hacked, and funds stolen if recent reports is anything to go by.

Representatives of the decentralized network are now working closely with law enforcement and cyber-security experts to investigate what they say is a “coordinated attack” that resulted in a loss of funds.

The Coordinator has been paused
The IOTA Foundation has subsequently paused the Coordinator and are urging users not to use their official wallet, Trinity, until further notice.

https://coingape.com/iota-network-has-been-hacked-and-funds-stolen-again/

IOTA Foundation pauses network, says between $300K and $1.2M worth of tokens stolen from users of Trinity wallet

Between $300,000 to $1.2 million worth of IOTA tokens are believed to have been stolen, according to IOTA Foundation co-founder Dominik Schiener.

https://www.theblockcrypto.com/post/55955/iota-foundation-funds-stolen-users-of-trinity-wallet

[Question123]

It's sad that everyear they have Exchanges that being hacked by the hackers , most of the site listed the security is good Like Binance but the hackers are very smart because they enter and get the money from the exchange.

I hope this year no more hack exchange to add in that list and for the team of the trading sites make sure to secure your system and also the information of your traders/user because they are affected to that also and posaible their real Identity to be compromised just like for the exchange who required KYC.