Cryptopia exchange hacked

[ethereumhunter]

From reading around reports seem to state that only Ether and Erc 20 token created on their platform were taken.

Elementus have a chart showing what coins they think have been taken and the amount, although i don't know the accuracy of there research.

I think they sell the tokens in the other exchanges and after they got BTC, they send it to another wallet. Maybe if we investigated deeply for each wallet, we could know on where exchanges the bitcoin has already send so we can send information to the exchange to freeze the account of that wallet. I think cryptopia needs to fix their bug and find the other if on the website still have a hole in their security

[1714795369]

1714795369

[1714795369]

1714795369

[1714795369]

1714795369

[1714795369]

1714795369

[RivAngE]

On another thread I did an amateurish search to see what's Cryptopia's BTC wallets look like... I don't like what I see but could someone more experienced than me check my findings and let me know if I've made a mistake somewhere or if indeed the Cryptopia's BTC wallets were also hacked alongside ETH?

Okay I think I found the Cryptopia's BTC wallet. My deposit there is kinda old and I can't recall 100% if it's the address I deposited was Cryptopia's or another exchange's, but I traced the movement and since the wallet's movements stopped on 14th January I'm 99% sure it's Cryptopia's.

This is their wallet: 3ALZ4ALw2T4jebXXUy8GMv2rLB7JpFL1JD

After many hops between 1-use addresses, I find a big amount of funds consecrated here: 12YBZCaPe45LFbvgYWP5AVm3pvZTtHTiNY
This was a new address created on 13th January.
It seems that after gathering BTC from different Cryptopia's wallets, summing 392.31 BTC, they sent a "test" transaction of 3 BTC on 14th January and 10 minutes later they sent all the amount to the same address.

From that point on, it seems like the funds were split to multiple addresses, probably many of which are exchanges.

Your thoughts? Anything I missed maybe?

that may have been cryptopia consolidating and securing its bitcoins into new wallets. the "test" transaction followed by full consolidation of the funds is indicative of that. that would be my first guess unless you're seeing the split funds enter other exchanges.

every report i've seen says it was ETH and ERC20 tokens---not bitcoin---that were stolen.

I though it might be wallets controlled by Cryptopia as well, but if you trace the next transactions you'll notice that the funds keep moving and splitting between multiple wallets.
Shouldn't the funds have been frozen while the police investigates if it was in Cryptopia's control?
This action looks more like hackers splitting the heist to multiple wallets and multiple exchanges.

...
On a 2nd though... there's also the possibility that Cryptopia sent their funds to another exchange for security. Being unsure which of their wallets are safe, they might decided to send them to a 3rd party who is then moving the funds like usual.

[Akoldi_ibk]

I thought everyone got major learning by hacked off cryptopia. You never and ever leave your coins on exchanges or webwallets. Sooner or later you're gonna lose money. You might use a wallet for storage, a place you have control over it. You are only transferring to an exchange if you plan to sell.

that works for long term trader or investor, but not for daily trader
if you are trying to make money by trading everyday, you will need to keep your coins on the exchanges
depositing/withdrawing everyday would be cumbersome, time consuming, and very costly

You are right. There is no way day traders won't leave some amount of their assets on exchange for profit taking purposes. For this reason, I think there is need for exchanges to step up their security and always have counter measures in place to protect their users and their own reputation as well.

[Noojna]

From reading around reports seem to state that only Ether and Erc 20 token created on their platform were taken.

Elementus have a chart showing what coins they think have been taken and the amount, although i don't know the accuracy of there research.

yes, those are the coins that were stolen, and we know for sure those coins won't come back. But the damage doesn't stop there.

Any company like cryptopia needs their daily profits to continue and honor its engagements; things like loans, rent, salaries, electricty, lawyer fees all continue to pile up while the New Zealand police sorts this out. Right now, we know that profits are not coming in, and we know this justice process will take a few months to a year.

Sorry guys, but they will auction off the depositor's coin in lots, and use the proceeds to pay back these debts piling up; unless of course the owners of Cryptopia step up and pay this out of their own pockets (which has also happened in the past, by the way).

It is essential that any sustainable trading scheme somehow repatriates the profits back to safety on a daily basis; a good coin trading strategy simply cannot allow a trader to leave coin at an exchange. Sooner or later things like this will happen.

[figmentofmyass]

I though it might be wallets controlled by Cryptopia as well, but if you trace the next transactions you'll notice that the funds keep moving and splitting between multiple wallets.

i don't know the logic behind it, but i remember when btc-e went down in 2017, they did the same thing when they set up new wallets---lots of moving and splitting into smaller lots. they later refunded the crypto (minus the cost of their lost USD funds).

Shouldn't the funds have been frozen while the police investigates if it was in Cryptopia's control?
This action looks more like hackers splitting the heist to multiple wallets and multiple exchanges.

tbh, i think the police would advise them to secure the coins in new wallets. i think the wallet activity we're looking at might be exactly that. not sure though.....

[bL4nkcode]

The hacker sent some DAPS token to mercatox and was successfully sold/traded in the platform. And asking money to stop the hacker.

https://twitter.com/boxmining/status/1088631767504805889

Though I'm not sure if the one who replied is a support staff from mercatox, but if not then mercatox should be penalize as for money laundering.

[figmentofmyass]

The hacker sent some DAPS token to mercatox and was successfully sold/traded in the platform. And asking money to stop the hacker.

https://twitter.com/boxmining/status/1088631767504805889

Though I'm not sure if the one who replied is a support staff from mercatox, but if not then mercatox should be penalize as for money laundering.

not sure on the details behind the screenshot, but the response looks like it's from a low level customer service rep. it might not represent their actual policies.

did cryptopia or the NZ police publish blockchain data about the stolen funds? addresses, types of coins that were taken, etc? i'm guessing not. if the only evidence is twitter detectives tracking funds on the blockchain, they may not be in trouble for money laundering. but who knows? there's not much precedent for this stuff.

[starmman]

subscribing to this thread - fingers crossed they get sorted soon and not all is lost!

[Blawpaw]

No news still??? The site is the same since January 14. Cryptopia didn't even bother to send a follow up to its users, so we are all in the dark at this point... I'm starting to seriously doubt if I'm going to see my coins ever again

[RivAngE]

Does this count as "news" ?
https://ambcrypto.com/cryptopia-compromised-in-another-attack-by-hackers-loses-180k-worth-of-ethereum-eth/

I guess the hacker decided to pick up the change!

[Blawpaw]

Does this count as "news" ?
https://ambcrypto.com/cryptopia-compromised-in-another-attack-by-hackers-loses-180k-worth-of-ethereum-eth/

I guess the hacker decided to pick up the change!

Well... it seems that the hacker only aimed for Ethereum ERC 20 Tokens. He aimed for ethereum Dentacoin, Oyster Perl, Lisk ML and Centrality. We may be able to get other coins back... well.. at least let's hope so :\

[necromastery]

No news still??? The site is the same since January 14. Cryptopia didn't even bother to send a follow up to its users, so we are all in the dark at this point... I'm starting to seriously doubt if I'm going to see my coins ever again

Yeah, it's about 2 weeks without any update on their investigation even in their social media. Maybe, it will take months until we get news from the team. I hope I'm wrong. I'm sure anxious feelings have begun to accumulate among cryptopia users now.

[Kiir]

I have no idea if it's true, but:

https://www.reddit.com/r/CryptoCurrency/comments/al4qjm/cryptopia_didnt_get_hacked_again_the_hacker_stole/

TLDR: Allegedly:
"Cryptopia didnt get hacked again, the hacker "stole Cryptopia's private keys and deleted topia's copy. "Basically using Cryptopia's address as his own."

[squatter]

I have no idea if it's true, but:

https://www.reddit.com/r/CryptoCurrency/comments/al4qjm/cryptopia_didnt_get_hacked_again_the_hacker_stole/

TLDR: Allegedly:
"Cryptopia didnt get hacked again, the hacker "stole Cryptopia's private keys and deleted topia's copy. "Basically using Cryptopia's address as his own."

That's incredible if true. It would mean the hacker assumed that Cryptopia didn't keep proper offline back-ups. That would mean they only kept one set of private keys, with everything stored on online servers. In this day and age, that's difficult to believe.

[sheenshane]

I have no idea if it's true, but:

https://www.reddit.com/r/CryptoCurrency/comments/al4qjm/cryptopia_didnt_get_hacked_again_the_hacker_stole/

TLDR: Allegedly:
"Cryptopia didnt get hacked again, the hacker "stole Cryptopia's private keys and deleted topia's copy. "Basically using Cryptopia's address as his own."

That's incredible if true. It would mean the hacker assumed that Cryptopia didn't keep proper offline back-ups. That would mean they only kept one set of private keys, with everything stored on online servers. In this day and age, that's difficult to believe.

Even before the hacked has not happened I don't trust Cryptopia exchange, a bunch of complaint regarding their exchange. Lack of customer supports staff, there's no reason they get hacked or either this case is an inside job.
What a kind of exchange they are why they don't use hardware wallet to keep their funds safe? I really doubt this is an inside job it is impossible to get hacked.

[joniboini]

What a kind of exchange they are why they don't use hardware wallet to keep their funds safe? I really doubt this is an inside job it is impossible to get hacked.

Well, either it's an inside job or they're a really crappy exchange. It's no use throwing around accusations right now because that doesn't matter in the end if there's no proper evidence, let's hope the police find the truth.

They might have a cold wallet but somehow they don't store the private key securely, just like what many articles suggested. So it doesn't matter if they have hardware wallet or not, if the hacker stole the seed and backup then it's pretty much game over. But yeah, it's hard to believe. #Exitscam is trending now btw.

[condoras]

Do we have any update about the NZ Police investigation? Either from Cryptopia or the authorities.
The news keeps coming and it will be good to have something more solid about all of that.

[RivAngE]

Do we have any update about the NZ Police investigation? Either from Cryptopia or the authorities.
The news keeps coming and it will be good to have something more solid about all of that.

The only valid source for information is the police's official site,
https://www.police.govt.nz/search-results/cryptopia

Ofcourse we might hear something from Cryptopia too, but I doubt they'll be able to say anything before the police issues an official statement.
So far, nothing new here,
https://twitter.com/Cryptopia_NZ
https://www.cryptopia.co.nz/

[chrysophylax]

subscribing to this thread - fingers crossed they get sorted soon and not all is lost!

Same ...

#crysx

[dikobraz123]

Actually nothing new...

http://www.police.govt.nz/news/release/police-continue-make-progress-cryptocurrency-investigation
https://cointelegraph.com/news/nz-police-report-says-excellent-progress-being-made-in-cryptopia-hack-investigation