⚠ ⚠ CRYPTOPIA EXCHANGE HACKED! -- REALTIME INVESTIGATION THREAD ⚠ ⚠

[BitGrind3r]

On the 14th January 2019 Cryptopia exchange suffered a security breach and got hacked.

Still no news have been released about the entity of this loss, both in terms of financial amounts and personal informations.


This thread will follow the events.


Help to collect informations posting here if you have details about the things going on.







UPDATES LIST:

UPDATE#1: https://bitcointalk.org/index.php?topic=5097623.msg49327113#msg49327113

UPDATE#2: https://bitcointalk.org/index.php?topic=5097623.msg49363466#msg49363466

UPDATE#3: https://bitcointalk.org/index.php?topic=5097623.msg49363548#msg49363548

[BitGrind3r]

STOLEN FUNDS TRANSACTIONS AND MOVEMENTS:

https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224#tokentxns


https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224

Tweets from Whale Alert on Saturday indicated that 19,391 ether (ETH) tokens worth nearly $2.44 million and around 48 million centrality (CENNZ) tokens worth about $1.18 million were transferred from Cryptopia to unknown wallets on Jan. 13. It is not currently clear if those funds were moved by the hacker or by the exchange.

https://twitter.com/whale_alert/status/1084444049313021952

https://twitter.com/whale_alert/status/1084442862970945536

[BitGrind3r]

From a r/Cryptopia thread:

r/Cryptopia
•Posted byu/toldjahP
1 hour ago
Cryptopia Hack analysis (min. $13,000,000 stolen)

Hi there


I checked etherscan and collected some informations below. In total min $13,000,000 were stolen.


Transfer of 19,390 ETH from Cryptopia ($2,468,043) (Jan-13-2019 01:30:35 PM +UTC): https://etherscan.io/tx/0x8a7c2b34f23eee02401e7c3fa1ea2ce8d3132e7ca3811d673ca35898c9535aae


Transfer of 48,029,305 ($1,072,362) CENNZ (Jan-13-2019 01:40:17 PM +UTC) Wallet is tagged as Cryptopia Wallet by Whale Alert: https://etherscan.io/tx/0x31a58df14ea3420878267e2b9cdd242d983b5298ef48c5cd9a799ed10605f393


Transfer of 3,844,247,574 ($304,181) DAPS (Jan-13-2019 01:40:17 PM +UTC): https://etherscan.io/tx/0x61b2ca4911750eb3278945f80e0c3f8a7f94578ba20b0e9240e5a86faaa166ae


CENNZ and DAPS where transfered to https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224 which is not the same adress where the ETH went on. But later this adress made a transfer to the ETH adress https://etherscan.io/address/0xc8b759860149542a98a3eb57c14aadf59d6d89b9 (which is the adress the ETH went).


Token Balance 2. adress: ($11,072,793) https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224


Please help to collect further details.

[batang_bitcoin]

There are topics already created about that.

CRAPTOPIA all ur coins are haX0red
CRYPTOPIA HACKED 🔥🔥🔥

[BitGrind3r]

There are topics already created about that.

CRAPTOPIA all ur coins are haX0red
CRYPTOPIA HACKED 🔥🔥🔥

thanks for pointing out

[four3200]

There are topics already created about that.

CRAPTOPIA all ur coins are haX0red
CRYPTOPIA HACKED 🔥🔥🔥

l8te to the buzz but good break down on the eth trail.

[BitGrind3r]

Can't find more useful informations at the moment. I will update this thread as soon as things move.

[coinbirds]

This hacker attack should open the eyes of holders how dangerous is to hold their funds on exchanges.
I know it is convenient, especially for traders but it is highly risky as we can see and we can lose our funds and could do anything against it in such situations.

[Teraboy]

Can't find more useful informations at the moment. I will update this thread as soon as things move.

All of the funds have been moving to this address https://etherscan.io/address/0xaa923cd02364bb8a4c3d6f894178d2e12231655c and it looks like the hacker was getting more and more funds from another source because there were 28k ethereum in that wallet.

[batang_bitcoin]

There are topics already created about that.

CRAPTOPIA all ur coins are haX0red
CRYPTOPIA HACKED 🔥🔥🔥

l8te to the buzz but good break down on the eth trail.

I don't think so, constantinople is delayed.

https://www.newsbtc.com/2019/01/15/ethereum-eth-price-plunges-as-constantinople-fork-is-delayed-due-to-security-flaw/

[bisdak40]

This is my first time that an exchange was supposed to be hacked where i have some port polio in it. Honestly i am scared right now on losing my money on that exchange. Does anybody here know on what would be the future of our money on that exchange if it is true that it was hacked?

[dhmctrader]

http://www.police.govt.nz/news/release/investigation-involving-crypto-currency-company

[BitGrind3r]

This is my first time that an exchange was supposed to be hacked where i have some port polio in it. Honestly i am scared right now on losing my money on that exchange. Does anybody here know on what would be the future of our money on that exchange if it is true that it was hacked?

It depends.

In the past we have seen many exchanges getting hacked. Some of those came back and refunded customers, others never got operative back ever again.

Everytime that an exchange announces that is got hacked there are two scenarios ahead:

1) possible exit scam under the excuse of an hack: in this case the service in unlikely to come back online and your funds are very likely to be lost forever.

2) If a real hack has been performed and the exchange suffered main loss from a main currency only, the minor volume altcoins should be still there. Is possible that in this case, as soon as the exchange comes back online, the non stolen coins will be returned back to their owners. Althought we still do not have any public update on this matter we can suppose that if Cryptopia want to come back operative needs to think about a possible solution to refund their customers. (such in example bitfinex did in the past with BFX tokens.)

Anyway just don't panic and keep an eye on the updates to know how to deal with your possible loss. I passed too through this shit in the past on the mintpal exit scam, but I learnt many things from that "error", just try to look at the positive side of it in the event your funds could be really lost forever.

Good luck!

[BitGrind3r]

This hacker attack should open the eyes of holders how dangerous is to hold their funds on exchanges.
I know it is convenient, especially for traders but it is highly risky as we can see and we can lose our funds and could do anything against it in such situations.

First rules of crypto: NEVER LEAVE YOUR FUNDS ON EXCHANGES OVERNIGHT. USE EXCHANGES ONLY ON THE MOMENT OF TRADING NEEDS. Or, at least, do not store more funds than you can afford to lose on random exchanges.

If you do not own the keys, you do not own the coins.

[dewildance]

We haven't seen a hack attack in a long time. However, Cryptopia is an experienced exchange. I can't figure out how accurate it is to rely on anyway. I never trust that exchange.

[Pline]

First rules of crypto: NEVER LEAVE YOUR FUNDS ON EXCHANGES OVERNIGHT. USE EXCHANGES ONLY ON THE MOMENT OF TRADING NEEDS. Or, at least, do not store more funds than you can afford to lose on random exchanges.

If you do not own the keys, you do not own the coins.

Well, but if I am a trader, what should I do next? Just everybody keeps funds on exchanges, but I prefer bigger exchanges with good security like binance, okex.
And yeah, if you have big portfolio, then I would split it between cold wallets and several exchanges!

[BitGrind3r]

NEW UPDATE FROM NZ POLICE: http://www.police.govt.nz/news/release/update-investigation-involving-cryptocurrency-company

[BitGrind3r]

First rules of crypto: NEVER LEAVE YOUR FUNDS ON EXCHANGES OVERNIGHT. USE EXCHANGES ONLY ON THE MOMENT OF TRADING NEEDS. Or, at least, do not store more funds than you can afford to lose on random exchanges.

If you do not own the keys, you do not own the coins.

Well, but if I am a trader, what should I do next? Just everybody keeps funds on exchanges, but I prefer bigger exchanges with good security like binance, okex.
And yeah, if you have big portfolio, then I would split it between cold wallets and several exchanges!

when you put your funds on third party wallet, of which you do not own the private key nor direct control on it, you accept the risk that your coins can get lost.

If you are a daily trader my suggestion is to deposit coins when you start trading and withdrawal at the end of each trading session. If the fees are higher than your profits, maybe you even can stop doing such movements.

If you are a medium-long term investors then it feels natural to me to withdrawal coins as soon as I bought on marketplace.

[levyashin]

Cryptopia is not a very new exchange so if the only stolen money is that ether they can cover that with previous profits. But if it is an exit scam like we all saw countless times, the exchange is gone. I hope everyone can take their tokens back.

[robelneo]

I have a lot of issues with them in the past, mainly from support and transactions that take days to confirm. Cryptopia is being beaten by the new exchanges that offered lower fee and cheap listing the only reason I'm here are from a few coins I'm holding that I can only trade here.