another crypto exchange hacked

[Hydrogen]

My biggest question is whether many of these heists are state sanctioned hacks.

Governments have been documented openly buying up zero day vulnerabilities for decades. They own stockpiles of undocumented and unpatched exploits which could allow them to penetrate systems that would otherwise be deemed rock solid. State based insistence of backdoors being built into everything doesn't help matters.

If ordinary crooks stole $50 million in ETH from a south korean crypto exchange, I would think their chances of being caught are decent.

But if it was conducted on behalf of a state with immunity to prosecution, it might better explain how many of these heists would appear to be planned & executed by highly trained professionals with an unlimited amount of resources and protection which ensure they're never caught or prosecuted.

At a certain point governments, banks and hedge funds could be more profitable hiring hackers to steal money than they would trading in markets or exchanges. If I'm thinking of this right now, I wouldn't be surprised if they realized it 50 years ago and have been working towards that goal ever since.

In addition to this, there are rogue nations like north korea who are under economic sanctions who could hack their neighbors with impunity and never be held accountable. South korea could avoid releasing news north korea was responsible for this type of act if only to avoid an appearance of weakness or incompetence, if that were the case.

Its been said as much as 80% of electronic heists are inside jobs, statistically. Which can also mean disgruntled, former or fired employees. I think the CEO attempting to cover losses decreases probability of that.

[Dart18]

They used their cold storage. That means there is something secure.
Exchanges are the ones prone to attacks and it did happen.

This is also why I think you should never put all your coins there.
Just deposit the number which you think could be risked and not everything. Just the right amount to trade.

[Hippocrypto]

They used their cold storage. That means there is something secure.
Exchanges are the ones prone to attacks and it did happen.

This is also why I think you should never put all your coins there.
Just deposit the number which you think could be risked and not everything. Just the right amount to trade.

I've been reading most discussions that talks about exchanges safety, all simple idea always shared here was never ever store your valuable asset at any exchanges. Even how reputable it was, there's a random situations which you can't prevent to occur, the hacking of your funds is always potentially happening.
We need to consider that seriously, before it's too late and indeed you should trade only when it's needed.

[TEX-LXRY]

We have been seeing this kind of accidents from the very beginning that a exchange gets hacked when it reaches a specific amount of money.
Most of it happens when people started to trust and then boom it get hacked.

I do not know why people still trust some exchanges with that much money.

[imstillthebest]

We have been seeing this kind of accidents from the very beginning that a exchange gets hacked when it reaches a specific amount of money.
Most of it happens when people started to trust and then boom it get hacked.

I do not know why people still trust some exchanges with that much money.

no . hacking does not work that way  . an exchange or almost any websites can get hack no matter how much money it already raised or no matter how much trust/reputation it already gained  . the reason why people still trust exchange with thier money is because they need it to trade or to buy cryptos . hacking incidents like this does not mean that all exchange are indangered now  . of course exchanges also tighten thier  fire walls so that hackers cannot penetrate easily

[Wapfika]

They used their cold storage. That means there is something secure.
Exchanges are the ones prone to attacks and it did happen.

This is also why I think you should never put all your coins there.
Just deposit the number which you think could be risked and not everything. Just the right amount to trade.

Sad news to all who got lose due to this hacking that's why as much as possible I don't leave investment in any exchanges unless it's too big amount or that coin I have is already considered shitcoin since hackers target is exchanges since like in real banks they are considered bank of cryptos.

[FlightyPouch]

Exactly! we have to hold our assets in a secure place ( local wallet ) and we can't trust on exchange's security

This is a warning, a piece of advice for a long time now and people still don't believe in this? Then after these people will again doubt the security of bitcoin and other crypto currencies even if those don't deserve those blame. Exchanges are not really a great place to store your balances, better keep it in a cold storage.

[JeffBrad12]

I do not want to talk too much and accuse, how stupid is Upbit losing his money? I only use the logic from which the funds to replace the money, this incident is always the same hacked and then replace it, until now I see a lot of price analysis leading below $ 5k as the lowest, so whether with this kind of news made it helps to drive the panic to touch the target, I always believe that drama is a lot of big people, the possibility is a greed and they benefit, I do not like hacking drama and it is always done over and over at the moment of bitcoin prices like this

hack exchange events often affect the market this drama is often an occurrence and certainly insiders ,I agree with your opinion that this is a manipulation to bring down market value so that it can buy cheaply to take advantage of the next year 2020 which some people consider is a bull run time ,I think emotions play strategy to make people panic

How can you be sure that the hacking is a drama though? do you think announcing of being hacked is as easy as just speaking and then things done? ofcourse not. They will be interrogated by the police if someone is reporting them and they need to provide reimbursement. If that's really a drama then that'd be the most effortful drama in the history of exchange hacking but it's most likely not when they goes far to provide reimbursement and even the announcement itself already damaging their reputation.

[iv4n]

I like the headline, another crypto exchange hacked! We knew that will happen again, it was just a question of time, and here it is. I don't know who is surprised about that, and like in most cases we believe that its an inside job. If nothing else we can speculate what happened, but I doubt that we will ever find out, like in many previous cases.
Once again I had luck, I didn't use Upbit exchange, I feel sorry for people who lost some money there, but I believe that Koreans are honest, they even said they will give money from their own pocket, so people who had some money there should be ok I guess.

[dothebeats]

Would be great if they actually cover the losses. 340k+ ether is not an easy figure to lose, considering that it's also on a slow rise lately. It goes to show that there are still some facets of exchange security that operators need to cover, else this will just continue happening and hackers will just repeat the process as long as they see vulnerabilities.

Either way, respect to the CEO for covering it up and actually doing something to address the issue and not just apologizing to its customers.

[SaShiRaJaVu]

Major South Korean crypto currency exchange Upbit has notified users of the theft of 342,000 Ether (ETH) from It's hot wallet via a on site notice.
Upbit CEO, Lee Seok-woo has pledged to cover losses (342,000 ETH) through corporate asset and have already moved crypto assets held in its hot wallet to cold storage.

Every couple of months we will be hearing a new exchange hack and millions of coins being stolen by the hackers and there is no clear idea on how we will stop hearing these huge losses.

Deposits and withdrawals will take at least two weeks to resume, with Lee Seok-woo promising to inform users as soon as they reopen,
I think there is nothing secure.

Does that mean that none of the depositors will be loosing any money and if that is the case it is a great thing and a rapid change from the past hacks where they will shut the exchange citing huge lose and the depositors will be sharing the loss.

[Bossian]

Well unless they will cover up the losses, It seems that South Korean exchanges are favorite targets of hackers or maybe some exchanges security are just weak. This is not one of the biggest stolen funds of all but if this happens regularly traders will begin to lose confidence trading in big or small exchanges.  

Was noticing the same thing. Several times I read about hacks in South Korea, another one was in Japan if I remember correctly.

I keep my assets at Bitstamp though and it's not in Asia (not for long though, will sell everything soon, bar 0.05 that I will keep just in case), but hope Bitstamp will be fine for another two or three months before I withdrew 98% of my funds from there. They pay me from a bank in Luxemburg if I remember correctly.

[ChrisPop]

To be sincere I have never used those asian exchanges. Generally they are very shady and not licensed with any authority. I'd much rather use some of the trusted american or european ones like Gemini or Kraken. Traders which play with those asian bucket shops deserve their destiny - don't want to be rude, but that's the truth. You're taking unnecessary risks when dealing with them.

[Dr.Osh]

the loss of 342,000 ETH in the upbit caused quite a stir at the end of this year. I honestly think that prices are soon dumping. but, seeing the upbit team who are professional and responsible, I think it will be all right.
in addition, many people associate this with the "end-of-year scenario" for crypto. however, there is other news about Idax exchangers who say that the CEO disappeared with his private keys.

[Oneandpure]

Major South Korean crypto currency exchange Upbit has notified users of the theft of 342,000 Ether (ETH) from It's hot wallet via a on site notice.

Upbit CEO, Lee Seok-woo has pledged to cover losses (342,000 ETH) through corporate asset and have already moved crypto assets held in its hot wallet to cold storage.

Deposits and withdrawals will take at least two weeks to resume, with Lee Seok-woo promising to inform users as soon as they reopen,

I think there is nothing secure.

Source: CoinTelegraph

Upbit have confirmed about their exchange market hacked more than 342k ETH, until two weeks later not available for withdrawing and deposit balance to Upbit account and waiting about their announcement when market back to normal, I am still not believe when have exchange market with higher security can hacked by some one with biggest amount more than 342k ETH,

[CarnagexD]

To be sincere I have never used those asian exchanges. Generally they are very shady and not licensed with any authority. I'd much rather use some of the trusted american or european ones like Gemini or Kraken.

I've never used upbit exchange but good thing they are able to compensate their users. But it is hard to believe that after the compensation, there are still left fund for upbit knowing the amount they have lost. It does not matter which country the exchange is resided as long as it is secured, it won't matter after all.

 Traders which play with those asian bucket shops deserve their destiny - don't want to be rude, but that's the truth. You're taking unnecessary risks when dealing with them.

Hey no one deserves to be in that situation, you're sounding like a racist with that. You condem asian exchanges as if there were never an incident of american and european exchanges hacking. Even the big ones have holes that can be breached. Even Binance has a history of stolen funds. So what's your point?

[piebeyb]

I do not want to talk too much and accuse, how stupid is Upbit losing his money? I only use the logic from which the funds to replace the money, this incident is always the same hacked and then replace it, until now I see a lot of price analysis leading below $ 5k as the lowest, so whether with this kind of news made it helps to drive the panic to touch the target, I always believe that drama is a lot of big people, the possibility is a greed and they benefit, I do not like hacking drama and it is always done over and over at the moment of bitcoin prices like this

hack exchange events often affect the market this drama is often an occurrence and certainly insiders ,I agree with your opinion that this is a manipulation to bring down market value so that it can buy cheaply to take advantage of the next year 2020 which some people consider is a bull run time ,I think emotions play strategy to make people panic

How can you be sure that the hacking is a drama though? do you think announcing of being hacked is as easy as just speaking and then things done? ofcourse not. They will be interrogated by the police if someone is reporting them and they need to provide reimbursement. If that's really a drama then that'd be the most effortful drama in the history of exchange hacking but it's most likely not when they goes far to provide reimbursement and even the announcement itself already damaging their reputation.

it's always done every few years, it would be difficult to understand because I don't have full proof of it, but I'm sure it's just their drama where the people inside do it too, I don't force anyone to believe me, I just have their own thoughts about that

[exstasie]

In addition to this, there are rogue nations like north korea who are under economic sanctions who could hack their neighbors with impunity and never be held accountable. South korea could avoid releasing news north korea was responsible for this type of act if only to avoid an appearance of weakness or incompetence, if that were the case.

I'm betting it's hackers backed by the North Korean government. There have been reports of this going back at least to 2017, likely related to avoiding economic sanctions: https://www.cnbc.com/2018/01/17/north-korea-hackers-linked-to-cryptocurrency-cyberattack-on-south-korea.html

The Lazarus attacks happened in late 2017, as the price of bitcoin began to hit new highs. The aim for North Korea was to steal cryptocurrency, which could help the country deal with the economic sanctions that have been imposed on it.

“We believe that this targeting is a continuation of North Korea’s attempts to use cryptocurrency as a means of circumventing sanctions and controls imposed by the international financial system,” Priscilla Moriuchi, director of strategic threat development at Recorded Future, told CNBC by email on Tuesday.

“The sanctions are having a negative impact on the Kim (Jong Un) regime and we believe the regime sees cryptocurrency as a tool for easing some of the financial pressure.”

Determining whether a group like Lazarus was involved will probably take a more time-intensive forensic analysis of the attack. We'll probably find out down the road, like we did with a number of other North Korea-based attacks targeting crypto.

[beerlover]

I think hackers will not stop due to all of these news. I mean when they are successful it gets heard and the other hackers gets hyped about the potential and they try as well. These are HUGE exchanges, even if they are not binance, we are talking about millions of dollars, what other website can you hack to get so much money? Without a proper trace neither, it is totally untraceable if you know what you are doing.

The best case we have right now is to stop promoting and letting everyone know the hacking. Sure, website itself will notify everyone but nowhere else should talk about it and make it a media blackout. I know I am writing and making it more known as well and contributor to the problem but I just wanted to offer maybe a possible solution.

[huige007]

We have been seeing this kind of accidents from the very beginning that a exchange gets hacked when it reaches a specific amount of money.
Most of it happens when people started to trust and then boom it get hacked.

I do not know why people still trust some exchanges with that much money.

It is the biggest truth of technology world that no system can be hundred percent secure and those that hold high values are the major targets of criminal hackers. Moreover, it is not like the hacker woke up one day, made few clicks and goes down the website or exchange. A lot of days, even months might get spend to make one hack reality. The best is to choose exchanges that take responsibility of such compromises.