[Cryptopia] ONLINE ARTICLES related to hack &theft of funds 2022 (non discussion

[xtraelv]

Cryptopia: A wildly popular platform that veered from one crisis to the next - Link - Susan Edmunds 06:52, Jan 17 2019 - Archive

Police have now stormed the office of a Christchurch cryptocurrency trader after millions of dollars worth of currency appears to have disappeared in a security breach.

Cryptopia's Colombo St headquarters was under police lockdown on Wednesday morning after a "significant amount" of cryptocurrency is thought to have been transferred without authorisation.

What this means for traders is yet to be seen, but whether money has been lost or not, the blow to confidence in Cryptopia will most likely prove fatal.

Bogus article. It even implies bitcoin and crypto in general is a scam.

​Now, the value of Bitcoin has fallen to US$3606 and the digital currency chatter has dropped away with it.

Bank of England Governor Mark Carney has warned of the failures of cryptocurrencies.

Police have now stormed the office of a Christchurch cryptocurrency trader after millions of dollars worth of currency appears to have disappeared in a security breach.

We would also like to make clear that Cryptopia are cooperating fully with the investigation team and a media report that police ‘stormed’ the building today is entirely incorrect.

https://www.police.govt.nz/news/release/update-investigation-involving-cryptocurrency-company

Update: Investigation involving cryptocurrency company
Wednesday, 16 January 2019 - 7:30pm
National News
The investigation into the alleged unauthorised transaction of cryptocurrency at the Christchurch company Cryptopia has continued today.
 
The inquiry is still in its very early stages and police are continuing to work with Cryptopia to establish what has happened and how.
 
Police are not yet in a position to say how much cryptocurrency is involved, other than it is a significant amount.
 
A large team, including Canterbury CIB and specialist staff from the police High Tech Crime Unit, have been assigned to the case.
 
There has been a visible police presence at the company’s Colombo Street headquarters throughout the day as police take the steps needed to progress the investigation.
 
While police are unable to go into details about specific steps being taken at this stage, we can say that our focus includes commencing both a forensic digital investigation of the company, and a physical scene examination at the building.
 
We are dealing with a complex situation and we are unable to put a timeframe on how long the investigation may take.
 
We are also aware of speculation in the online community about what might have occurred.  It is too early for us to draw any conclusions and Police will keep an open mind on all possibilities while we gather the information we need.  
 
A priority for police is to identify and, if possible, recover missing funds for Cryptopia customers; however there are likely to be many challenges to achieving this.
 
We would also like to make clear that Cryptopia are cooperating fully with the investigation team and a media report that police ‘stormed’ the building today is entirely incorrect.
 
Anyone with information which could assist the investigation can contact police by email at crypto@police.govt.nz (link sends e-mail).
 
ENDS
 
Issued by Police Media Centre.

[1714179032]

1714179032

[1714179032]

1714179032

[Timelord2067]

Today I read an article where some users claim that it could be initiated from within. Perhaps the exchange itself or someone from the employees appropriated the money for themselves. Article in Russian https://forklog.com/chast-propavshih-s-cryptopia-sredstv-obnaruzhena-na-birzhe-binance/
On January 13 there were two big transactions for $ 4 million (19,391 ETH/ 48,029,306 CENNZ). Very suspicious

Archive of original Russian Text: LINK

OK, firstly the link to the google translate: LINK and Archive

Some of the funds missing from Cryptopia were found on the Binance exchange.

news 01/16/2019

CEO Binance Changphen Zhao confirmed that a part of the funds missing earlier this week from the New Zealand Cryptopia was found on the cryptocurrency exchange headed by him, after which he was successfully blocked.

In particular, Zhao responded to the tweet by @ShaftedTangu, who tried to attract the attention of Binance representatives to the fact that the funds missing from Cryptopia seem to have been found.

    Just checked, we were able to make some money. I don’t understand why the hackers keep sending to Binance. And we will freeze it. It's a high risk maneuver for them. https://t.co/i0PeahLzic

    - CZ Binance (@cz_binance) January 16, 2019

    “Just checked, we managed to freeze part of the funds. I do not understand why hackers constantly send [coins] to Binance. Social networks react very quickly, and it is easy for us to freeze funds. These are very risky maneuvers for them [hackers], ”Zhao wrote.

Recall, representatives of Cryptopia reported on Tuesday, January 15, about the suspension of work due to "substantial losses" due to a security breach. Somewhat later, when there were rumors that the exchange itself could be involved in the loss of funds, the New Zealand police joined the investigation into the incident. Official confirmation of exactly what amounts in question, however, has been reported.

Nevertheless, as Changpeng Zhao correctly noted, “social networks react very quickly,” and we can say in advance that the damage has been partially fixed. In particular, users drew attention to a rather interesting chronology of events, suggesting that the theft of approximately $ 14 million (this amount is previously discussed) in ETH and ERC-20 tokens could be initiated from the inside. At the same time, the so-called exit-scam is not excluded - an attempt by the management or someone from the staff to appropriate the funds of users.

So, on Tuesday, on the subreddit of r / cryptopia, user toldjahP posted an entry in which he referred to several Ethereum transactions that were made from Cryptopia’s purses about 17 hours before the exchange announced “unplanned technical work” and then recognized the loss of funds.

It is also noteworthy that the famous Twitter account Whale Alert drew attention to the fact that funds from Cryptopia are transferred to unknown wallets on January 13th. It was about at least two very impressive transactions: at 19,391 ETH (about $ 2.5 million) and 48,029,306 CENNZ ($ 1.17 million).

    19,391 #ETH (2,438,152 USD) transferred from #Cryptopia to Unknown wallet

    Tx: https://t.co/xTxMKRJSD8

    - Whale Alert (@whale_alert) January 13, 2019

    48,029,306 #CENNZ (1,176,596 USD) transferred from #Cryptopia to Unknown wallet

    Tx: https://t.co/u3RiHh7riT

    - Whale Alert (@whale_alert) January 13, 2019

In his record on Reddit, toldjahP also provides a link to a transaction in the amount of 3.8 billion DAPS tokens from the Decentralized project Anonymous Payments System. But even more interesting is the last link, which leads to an address that at some point turned out to be more than $ 11 million in various ERC-20 tokens. All of them were sent from Cryptopia almost simultaneously and belong to a variety of projects, including Dentacoin, Spank, Ethereum Dark, TenX Pay, Bytom and Golem.

Later, the already mentioned @shaftedTangu led a detailed course of events in the thread on Twitter:

    Topia hack addresses. This is topia ETH / ERC20 address https://t.co/wZ7THdpYc6

    - 🐒🐵I Dream Of Alts🐵🐒 (@ShaftedTangu) January 15, 2019

It is also alleged that part of the funds was not only on Binance, but also on other exchanges.

We add that the representatives of Cryptopia have not yet commented on the information published on social networks.

ForkLog continues to monitor developments. Subscribe to our news in Telegram: ForkLog Live - the entire news feed, ForkLog - the most important news and polls.

[Timelord2067]

We would also like to make clear that Cryptopia are cooperating fully with the investigation team and a media report that police ‘stormed’ the building today is entirely incorrect.

When you say "we" does that mean you are an employee or authorised representative of Cryptopia?  Given Rob Dawson's Father Pete (CEO and director) has already given a blanket "no comment" http://archive.fo/m4It5#selection-1573.1-1573.220 are you sure you want to comment on the police investigation?

Dawson's father, Pete Dawson, is now the sole director and a 5 per cent shareholder of Cryptopia. Pete Dawson, who is the Canterbury Returned Services Association (RSA) president said police had told him to say nothing.

https://www.police.govt.nz/news/release/update-investigation-involving-cryptocurrency-company

This link has already been posted twice, please don't post it again.

[Timelord2067]

Am posting this from another thread:

Haшeл ceйчac инфy в oднoм нoвocтнoм тeлeгpaмм кaнaлe , нe pyчaюcь нa cкoлькo дocтoвepнaя ,  чтo вpoдe кaк взлoмaли нe кoшeльки a интepфeйc

 
https://etherscan.io/tx/0x7b71a39db74cef6f9c09c801a4d7416b592f3cb669cf356b3ff6d6167d8e949b
https://etherscan.io/tx/0x8a7c2b34f23eee02401e7c3fa1ea2ce8d3132e7ca3811d673ca35898c9535aae
https://etherscan.io/tx/0x5ea5882ca42278ba41463be8dee87b8be93df3c4d8fd5a5424840f97d5d87b57


Кoшeльки кyдa пpишли cpeдcтвa вopoвaнныe aктивы

https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224
https://etherscan.io/address/0xaa923cd02364bb8a4c3d6f894178d2e12231655c

Oни вывoдили вce пoдpяд , вooбщe нe paзбиpaяcь , дaжe cocкaмившиecя мoнeты вывeли ,  нaпpимep 3,818,547 PRL Oyster Pearl  нa cyммy $1,948,068.67 a этoт тoкeн c нeдaвнeгo вpeмeни вooбщe нe тopгyeтcя ни нa oднoй биpжe .
https://etherscan.io/token/0x1844b21593262668b7248d0f57a220caaba46ab9?a=0x9007a0421145b06a0345d55a8c0f0327f62a2224

Ha caйтe:

This is the Privacy Policy for Cryptopia Limited, located at PO Box 1117, Christchurch, 8140, New Zealand.

B peгиcтpaтype:

Company Name: CRYPTOPIA LIMITED
Address: 109 Montreal Str, Sydenham
City: Christchurch 8023
Country: NEW ZEALAND
Location Type: Single address

Пocлeдняя cтpoкa гoвopить чтo тaм нe глaвный oфиc, a aдpec для кoppecпoндeнции – пoчтoвый ящик...

ПC: Пoчтoвый кoд тoжe нe coвпaдaeт... Ha aдpece видeн кaкoй-тo cклaд c бapaxлo cзaди – в oкнo виднo.

[Timelord2067]

https://www.whois.com/whois/cryptopia.co.nz http://archive.fo/pihIx

Updated *4 days ago*

Code:

Domain:
cryptopia.co.nz
Registrar:
Metaname
Updated On:
2018-08-30
Status:
200 Active
Name Servers:
mario.ns.cloudflare.com
vera.ns.cloudflare.com
Raw Whois Data

% Terms of Use
%
% By submitting a WHOIS query you are entering into an agreement with Domain
% Name Commission Ltd on the following terms and conditions, and subject to
% all relevant .nz Policies and procedures as found at https://dnc.org.nz/.
%
% It is prohibited to:
% - Send high volume WHOIS queries with the effect of downloading part of or
%   all of the .nz Register or collecting register data or records;
% - Access the .nz Register in bulk through the WHOIS service (ie. where a
%   user is able to access WHOIS data other than by sending individual queries
%   to the database);
% - Use WHOIS data to allow, enable, or otherwise support mass unsolicited
%   commercial advertising, or mass solicitations to registrants or to
%   undertake market research via direct mail, electronic mail, SMS, telephone
%   or any other medium;
% - Use WHOIS data in contravention of any applicable data and privacy laws,
%   including the Unsolicited Electronic Messages Act 2007;
% - Store or compile WHOIS data to build up a secondary register of
%   information;
% - Publish historical or non-current versions of WHOIS data; and
% - Publish any WHOIS data in bulk.
%
% Copyright Domain Name Commission Limited (a company wholly-owned by Internet
% New Zealand Incorporated) which may enforce its rights against any person or
% entity that undertakes any prohibited activity without its written
% permission.
%
% The WHOIS service is provided by NZRS Limited.
%
version: 8.0
query_datetime: 2019-01-12T16:58:34+13:00
domain_name: cryptopia.co.nz
query_status: 200 Active
domain_datelastmodified: 2018-08-30T12:57:17+12:00
domain_delegaterequested: yes
domain_signed: no
%
registrar_name: Metaname
registrar_address1: PO Box 32133
registrar_city: Christchurch
registrar_province: Canterbury
registrar_postalcode: 8147
registrar_country: NZ (NEW ZEALAND)
registrar_phone: +64 800 00 12 93
registrar_email: email@metaname.co.nz
%
ns_name_01: mario.ns.cloudflare.com
ns_name_02: vera.ns.cloudflare.com
%
% Additional information may be available at https://www.dnc.org.nz/whois/search?domain_name=cryptopia.co.nz
%

https://www.dnc.org.nz/whois/search?domain_name=cryptopia.co.nz http://archive.fo/DAONT

Code:

Query Date Time 	17 January 2019 3:15 pm
Domain Name 	cryptopia.co.nz
Query Status 	Active
Domain Date Registered 	7 May 2014 11:41 am
Domain Date Billed Until 	7 May 2027 11:41 am
Domain Date Last Modified 	30 August 2018 12:57 pm
Domain Delegate Requested 	yes
Domain Signed 	no
	
Registrar Name 	Metaname
Registrar Address 	PO Box 32133
Registrar City 	Christchurch
Registrar Province 	Canterbury
Registrar Postal Code 	8147
Registrar Country 	NZ (NEW ZEALAND)
Registrar Phone 	+64 800 00 12 93
Registrar Email 	support@metaname.co.nz
	
Registrant Name 	Procurement
Registrant Contact Country 	NZ (NEW ZEALAND)
Registrant Contact Email 	procurement@cryptopia.co.nz
	
Admin Contact Name 	Procurement
Admin Contact Country 	NZ (NEW ZEALAND)
Admin Contact Email 	procurement@cryptopia.co.nz
	
Technical Contact Name 	Procurement
Technical Contact Country 	NZ (NEW ZEALAND)
Technical Contact Email 	procurement@cryptopia.co.nz
	
NS Name 	mario.ns.cloudflare.com
NS Name 	vera.ns.cloudflare.com

[Mpamaegbu]

I am strongly of the opinion that whenever an exchange hack happens, there are insiders and staff who might have compromised information. This is the case with Cryptopia. I really don't care how anyone argues otherwise. This is my 2cent.

[yurimir]

Fresh Cointelegraph article - Cryptopia Alleged Hack: Police Are on the Case While Community Tracks Down Stolen Funds

https://cointelegraph.com/news/cryptopia-alleged-hack-police-are-on-the-case-while-community-tracks-down-stolen-funds

[BookeyBitMan]

One of hacker/s address - Cryptopia_Hack2 is blocked or marked with "Heist" with Balance: 29,113.679050642739615899 Ether.

Link: https://etherscan.io/address/0xaa923cd02364bb8a4c3d6f894178d2e12231655c

Cryptopia to Cryptopia_Hack to Cryptopia_Hack2.

[krysta11]

LINDA Cryptopia cold storage https://lindaexplorer.kdhsolutions.co.uk/richlist

[yurimir]

One more article. What will happen next? - Where’s My Money? Crypto Users Crusade To Claim Cryptopia Investments  

https://www.cryptoglobe.com/latest/2019/01/wheres-my-money-crypto-users-crusade-to-claim-cryptopia-investments/

[Timelord2067]

Thanks people, keep those links coming in.

[Timelord2067]

Am just moving this to here so that I can redo the post on the first page.

Lost funds:

http://archive.fo/m4It5#selection-1349.1-1361.69

She said there had been reports by blockchain transaction monitoring accounts on social media that the Cryptopia transfer involved two transactions worth a US$3.6 million (NZ$5.3m) combined.

One was for US$1.2m worth of a cryptocurrency called Centrality. That equates to 48 million tokens.

The second was for US$2.4m in Ethereum, or about 19 thousand tokens.

https://etherscan.io/tx/0x8a7c2b34f23eee02401e7c3fa1ea2ce8d3132e7ca3811d673ca35898c9535aae      over 19k eth have been stolen?

The receiving address: ??

All Cryptopia's etheriums are here https://etherscan.io/address/0xaa923cd02364bb8a4c3d6f894178d2e12231655c

[Timelord2067]

LOST FUNDS.

ABCDE	Wallet	Amount	$USD Value	Cryptopia or Receiving Address
ETH	https://etherscan.io/address/0xaa923cd02364bb8a4c3d6f894178d2e12231655c	29,113.679050642739615899	$3,640,374.43 (@ $125.04/ETH)	Receiving	Archive	Cryptopia_Hack2
ETH	TX	19,390.66318614898972218	$2,437,018.55	TX	http://archive.fo/nm50A	TX to Cryptopia_Hack
ETH	https://etherscan.io/address/0xc8b759860149542a98a3eb57c14aadf59d6d89b9	0.00	$ 0.00	Receiving	Archive	Cryptopia_Hack
ABCDE	Wallet	Amount	$USD Value	C/R	Archive	Name

Main post for totals of stolen funds can be viewed here: https://bitcointalk.org/index.php?topic=5097916.msg49253290#msg49253290

[krysta11]

DOGECOIN Cryptopia cold wallet
https://dogechain.info/address/DFBZ2U7cErTBNDFqFBfA3cGbGfnxwVXuth
42,450,000.00000000 DOGE

Doge possible are safe

I made depo on Cryptopia hot wallet DHKfajPsVBoTCgQxZJfQcT1CS3FuDPmmVF at end 2018.

[Verdell]

When will cryptopia customers be able too log in and get there coins back

[Timelord2067]

When will cryptopia customers be able too log in and get there coins back

Short answer - given there is a police investigation, could be months if not years for the NZ Police to establish what was taken and by whom.  Firstly there is the theft in January 2019 of Crypto to investigate, then there is the issue of potentially trading while insolvent due to Cryptopia being unable to repay to depositors funds that had been stolen via 51% attacks in the second half of 2018. Then there are the class actions to recover funds by depositors to be considered. In all likely-hood an administrator would be likely be appointed to forensically examine which accounts owned what and seek a determination from a Judge how best to distribute to the masses funds from both hot and cold wallets which is why I am trying to gather together in this thread proof of what crypto was stolen and what hot and cold wallets have been left intact (not to mention any class actions & news articles on the Police's investigation and the NZ Crown's DPP potentially laying charges ( and the time frames those proceedings might take) ).

Get yourself a pen and paper and write down as many details as you can about your own account.

user name, password, email address - any 2FA and any recovery codes. Deposits. Withdrawls. What coins were up for sale (or buy). Even your Karma score.

Given that it could be years - put that sheet of paper in a safe place. Memories, Hard Drives and Mobile phones come and go, a sheet of paper in a safe place can be the key to recovering your funds in a few years time.

[FinalProgram]

Good article https://elementus.io/blog/cryptopia-hack-transparency/

[krysta11]

https://chainz.cryptoid.info/vivo/wallet.dws?42143.htm
It's VIVO Cryptopia wallet, possible(not active withdrawals from 14.01.2019)

[Lafu]

You can edit your First post right now .
You are right with that , that i am a part of Cryptopia in form as an volunteer Moderator without any payments and also as Xrtraelv a Customer .
And I am not contracted.
I am not employed by cryptopia!

For this Cristmas day i just posted an update for the maintenance .
All i posted in this thread was and is done  volunteer and posted from myself without any instructions from Cryptopia , i just asked if i can post the things with there approval !


Update :

Thanks for the edit !

[Timelord2067]

Mothership Public Statement regarding the Cryptopia’s security breach on 14th Jan, 2019

Linh Le Jan 22 (2019)

https://blog.mothership.cx/mothership-public-statement-54aac6ee03cf - Archive: http://archive.fo/MK9P1

The official public statement from Mothership regarding the recent event happened to Cryptopia.

Mothership would like to release an official statement in the wake of the Cryptopia event, which in their own words:

    14th January 2019, the Cryptopia Exchange suffered a security breach which resulted in significant losses. Once identified, the exchange was put into maintenance while we assessed damages.
     Cryptopia has notified and is cooperating with the appropriate government agencies, including the NZ Police and High Tech Crimes Unit.

As the event unfolds, Mothership stakeholders had a considerable amount of tokens on the site and have been affected by the breach with over 32 million MSP, which is about 15% of the total supply. Cryptopia has not confirmed if the tokens on their exchange have been stolen; but as a company with a large number of customers involved, Mothership ought to take proper measurements and consider the worst scenario of this event as a hacking incident.

For immediate course of actions, we have reached out to HitBTC and Lykke regarding blacklisting the stolen coins. We are also getting in touch with Cryptopia while setting up our own onchain tracking so we know where the funds move and can blacklist them ourselves.

In direct reaction to the 32 million MSP affected, Mothership has decided to carry out a token swap. Those who are in possession of their tokens will be able to simply exchange their MSP. And those who have suffered from the Cryptopia incident will be able to go through a claim process and reclaim their MSP.

We will not build a separate swap product, but implement this swap on our own exchange, so the timing of the swap will follow the schedule of our launch.

The swap and claim process, at the time of discussion, will be roughly as follow:

    People who have MSP will have to create an account on the Mothership exchange, deposit their MSP and get the same amount of new tokens on their balance;
    People who had MSP on Cryptopia will also have to create an account on our exchange and make a claim. We will then manually check each claim with Cryptopia, if they agree to cooperate, and grant the new token accordingly if the claim is confirmed as legitimate.

For the time being, those who have been affected are welcome to begin the claim process by filling out this form. Please note that the investigation is still ongoing, and we yet have to discuss the terms of cooperation with Cryptopia — meaning the likely time frame we are looking at for the swap is a few months from now. However, we would like to get to know you right away, and represent your interests as a group.

Mothership is acknowledging the severity of the Cryptopia’s breach and its consequences, but we would like to take the chance to reaffirm that Mothership will not let the event interfere with our plan to launch our own exchange. Our Chief Technical Officer and the Product team will continue as normal and any technical activities for the swap will happen AFTER launch.

As for the time being, we will get to know all the affected persons, establish communication with Cryptopia, assemble data, and map out a more detailed plan. We will of course keep you updated on our efforts of tracking the stolen coins, and for other exchanges we might issue a blacklist ourselves so it is easier for them.

We thank everyone for their support and understanding of our decisions as well as handling in the wake of the event. Any questions or comments regarding the event can be asked directly on the Mothership main Telegram group, or in the chat box on our platform.

FOR THE MENTIONED CLAIM FORM, PLEASE CLICK HERE

* For holders who do not remember the exact amount of MSP they had on Cryptopia — it’s OK — just tell us the approximate amount in the form so we can understand the magnitude of your share. We will be checking every claim with Cryptopia to confirm the precise numbers.