FTX has been hacked, delete the app, don't go to website

[bbc.reporter]

According to some people in social media, FTX has been hacked and users who have the app installed in their phones might be at risk for malware if they update this. It will be safer to delete it. It is also adviced to avoid going to the site because there might be trojans.

This is a public service announcement and I created this thread here in main bitcoin subforum on purpose where it will be seen by more people. Moderators can delete or move this thread later.

[1714713282]

1714713282

[1714713282]

1714713282

[1714713282]

1714713282

[OgNasty]

I’ve heard over 300 million dollars has already been taken. Possibly up to a billion dollars. Early speculation is that it’s an inside job by FTX employees or possibly even Sam trying to make a getaway. I’ll wait until we find out what really happened but it sounds like this is quickly on its way to becoming a Hollywood movie. Be careful out there!

[mk4]

Just a heads up: a lot of people might probably say that this is unlikely a "hack" and that some FTX personnel(regardless if it's SBF or not) is just running away with the funds(and I agree that this is highly more likely), but regardless — don't open the FTX website and uninstall all FTX apps. JUST TO BE EXTRA SURE.

[KEN L]

There is a high probability that it was done by their insiders. It is really inhumane. This is too dramatic. I really want to know how the user funds are solved.

[daweller1]

I only trust exchanges with a few hundred $ worth of btc,
if I can make it into thousands then I cash out the original investment
don't trust exchanges with more than  a few hundred bucks

[Gyfts]

"Hacker" was able to access source code and insert malicious code all unnoticed, then push an update to all users. I understand that's what these exchanges like to say for PR reasons while they escape with peoples' funds and evade authorities, but surely people have gotten wiser.

Anyways - Let this serve as a lesson for exchange users and traditional bank users. FTX began to collapse because they didn't have the billions in liquidity to deliver on their users' withdraw requests. They needed emergency funding that I believe they secured, of course that didn't matter in the end anyways, people lost confidence. Banking with fiat works the same - banks do not hold cash. If everyone, or enough people, lose confidence in the institution and flock to the banks to withdraw cash, the entire system collapses because they don't have enough cash on hand. All exchanges, banks, etc. work this way.

Centralized financial institutions do not responsibly hold your funds. Be your own bank.

[aoluain]

What you need to consider is that there is some kind of exchange war going on, so there is a good reason for other exchanges to spread lies to get a competitor down. Still I would never touch anything of ftx.

That competitor was down already, the likely scenario is that it was an inside job
as o_e_l_e_o suggested. It makes perfect sense, why hasn't FTX been hacked
before this, I mean I'm sure there were attacks of the platform in the past.

I have deleted the app as directed, luckily I have no funds on FTX  ^{or any other exchange}

[franky1]

"Hacker" was able to access source code and insert malicious code all unnoticed, then push an update to all users. I understand that's what these exchanges like to say for PR reasons while they escape with peoples' funds and evade authorities, but surely people have gotten wiser.

Anyways - Let this serve as a lesson for exchange users and traditional bank users. FTX began to collapse because they didn't have the billions in liquidity to deliver on their users' withdraw requests.

here is the thing. crypto doesnt just vanish, (true crypto that uses blockchains.)
i do not believe it to be a hack.

much the same like other exchanges where CEOS retire claiming "hack" as the reason they move on

i feel its the management of ftx that syphoned funds out (taking the good assets out) and left ftx as a brand in a negative paper loss position in legal tax/debt law framework. where by just like all liquidation companies that company is left in a debt position that gets write off in a fiat world bankruptcy

knowing DCG is a large partner/stake holder of FTX i wouldnt be shocked if all the good assets turn up in their portfolio sooner or later

anyway i do find it funny how SBF resigned. .. put someone else in CEO status. and hen filed for bankruptcy and now news of a hack.. leaving the new guy with al the legal trouble and SBF able to carry on business as usual with his other projects.

SBF did not go down with the ship. he jumped off ship and in a lifeboat days before the ship hit the rocks

[harapan]

Just a heads up: a lot of people might probably say that this is unlikely a "hack" and that some FTX personnel(regardless if it's SBF or not) is just running away with the funds(and I agree that this is highly more likely), but regardless — don't open the FTX website and uninstall all FTX apps. JUST TO BE EXTRA SURE.

Thank You for the heads up what's more funny right now is seeing user's of Binance making mockery of FTX user's forgetting they are all in this together. If they are thinking they be safe with Binance then they are messing about. Get of Crypto that are Centralized and also Banks that are fully regulated. The cycle continues, MT. GOX FTX who's next ? Bring it coming.

[Minecache]

"Hacker" was able to access source code and insert malicious code all unnoticed, then push an update to all users. I understand that's what these exchanges like to say for PR reasons while they escape with peoples' funds and evade authorities, but surely people have gotten wiser.

Anyways - Let this serve as a lesson for exchange users and traditional bank users. FTX began to collapse because they didn't have the billions in liquidity to deliver on their users' withdraw requests. They needed emergency funding that I believe they secured, of course that didn't matter in the end anyways, people lost confidence. Banking with fiat works the same - banks do not hold cash. If everyone, or enough people, lose confidence in the institution and flock to the banks to withdraw cash, the entire system collapses because they don't have enough cash on hand. All exchanges, banks, etc. work this way.

Centralized financial institutions do not responsibly hold your funds. Be your own bank.

I definitely won't believe this story, they've definitely gone bankrupt and can't liquidate their users, this is the perfect escape plan.

This is not the first time an exchange has crashed, we have had Mt.gox crashes before and the drop is said to be as severe as FTX but eventually people will quickly forget it and will still use centralized exchanges as their utility is essential.

The way a centralized exchange and a bank work is quite similar, but it's pretty lame when you compare how secure a bank is to a small exchange like FTX. Banks are backed by the government and banks bankrupt only when the government collapses but better be your own bank.

[Frankolala]

Hackers are always online phishing and looking for what to hack FTX is a victim I just hope that all the people that has funds in their custody will be able to bear the lost  and learn that you shouldn't put your trust and funds on these centralized system because for funds is not save with them.

I suspect the FTX personnel contributed to the hack or FTX are bankrupt and coming up with fishery stories. Banks are also the same you can loose your funds anytime the bank crashes, security is the major challenge the centralized system is passing through. Save your funds in Bitcoin and be your own security because you will secure it best than anybody when you have the knowledge. Thank you OP I have deleted their app as I got this information.

[Wind_FURY]

Just a heads up: a lot of people might probably say that this is unlikely a "hack" and that some FTX personnel(regardless if it's SBF or not) is just running away with the funds(and I agree that this is highly more likely), but regardless — don't open the FTX website and uninstall all FTX apps. JUST TO BE EXTRA SURE.

It's not unlikely a "hack", it's VERY VERY UNLIKELY a hack. They're going to run, then hide after what they did, and they're taking their users' money with them! Hahaha!

It's currently harder to trust which exchanges are safe for us plebs. I'm seeing some users in Twitter who tweet that "Binance is the safest" exchange, but how do we prove that unless everyone withdraws their coins to test if they have enough in their vaults/reserves to pay all their users.

[Welsh]

The sad thing is; this is almost predictable. Seems to happen every time something like this happens. This isn't going to help the short term price either, and further reduces consumers confidence. Fortunately, in terms of price it's hitting us at a time where investment would've been low anyhow.

Unfortunately, a ton of people have yet again lost money. I just wish we could change the status quo, and eradicate exchanges which have wallets completely. There shouldn't be the option of storing money on an exchange, since that introduces bad practices, and even encourages them. That way, things like this wouldn't happen, and consumer confidence wouldn't be damaged, and ultimately people wouldn't lose their Bitcoin.

[o_e_l_e_o]

Both FTX and FTX.us were hacked. My understanding is that these are two entirely separate companies. FTX.us was continuing to server its users, was not involved in the Binance deal, had not had liquidity problems, and so on. They were an entirely separate company with separate wallets, separate databases, a separate back end, etc.

And so what is the likelihood of a random attacker breaking in to two entirely separate exchanges at the exact same time? Almost zero. And what is the likelihood of an attacker simultaneously gaining access to the accounts needed to push malicious app updates as well as the accounts needed to put malware on their website as well as both exchanges' wallets and private keys? Even closer to zero. This is almost certainly an inside job, the way I see it. And with that, any shred of hope that FTX users had of recovering even a portion of their assets is gone.

Just a heads up: a lot of people might probably say that this is unlikely a "hack" and that some FTX personnel(regardless if it's SBF or not) is just running away with the funds(and I agree that this is highly more likely), but regardless — don't open the FTX website and uninstall all FTX apps. JUST TO BE EXTRA SURE.

I don't know how FTX works (and I suppose it depends on the specifics of your bank/jurisdiction), but it is possible that FTX has permission to pull funds from users' linked bank accounts or cards to execute buy orders. Users need to make sure they revoke all access, if they haven't already when they went bankrupt. I'd also be concerned about the security of my other private keys and sensitive data which is present on any device which has since accessed/used/downloaded FTX software.

don't trust exchanges with more than  a few hundred bucks

Don't trust exchanges. FTFY.

If they are thinking they be safe with Binance then they are messing about.

Exactly this. FTX was the 2nd(?) biggest exchange. If they can simultaneously go bankrupt and also scam all their users, then any other exchange (Binance included) can do that too. Any coin not in your own wallet is not yours.

It's currently harder to trust which exchanges are safe for us plebs.

Here's a simple way to find out: Is the exchange centralized/custodial? If yes, then it isn't safe.

[tadamichi]

It's currently harder to trust which exchanges are safe for us plebs. I'm seeing some users in Twitter who tweet that "Binance is the safest" exchange, but how do we prove that unless everyone withdraws their coins to test if they have enough in their vaults/reserves to pay all their users.

Dont trust. Self-custody correctly and youre safe. Saves time, money and nerves in the long run. Using a middlemen involves trust, which always has the possibility to be abused. Theres no way around it.

[koindeks]

I wish it wasn't like that. I used to love FTX.

[LogitechMouse]

Many people lose money in LUNA and now many people lost money again in FTX (particularly investing into FTT token).

Hacked or whatever it is, FTX is f*cked up right now and I just hope that only few here lost their money in that exchange. I personally don't use that exchange and I'm only using Binance, but seeing investors lose money makes me sad for a bit but I guess it's normal in crypto already. Many also lost money in the past for different reasons and people just move on with it and be careful with their next investment.

I just saw a Facebook post a while ago saying that SBF is trying to escape using his private jet. No links though and no articles being released yet so maybe this isn't true. Just forget about FTX at all.

[DapanasFruit]

I’ve heard over 300 million dollars has already been taken. Possibly up to a billion dollars. Early speculation is that it’s an inside job by FTX employees or possibly even Sam trying to make a getaway. I’ll wait until we find out what really happened but it sounds like this is quickly on its way to becoming a Hollywood movie. Be careful out there!

Yes, this disaster is certainly a very good Hollywood movie material and they already have the lead in name: Jonah Hill which got a lot of facial similarities with SBF. Now, no matter how we take things here lightly, this is a very sad week for the whole cryptocurrency as this unfolding situation is a big blow to its core. Of course, am not worried of its survival because it will but this can surely set us many years backward. I would agree that there is a strong possibility that this is just an inside job...maybe even with the approval of SBF himself so he can get some of the money he needs while hiding somewhere in a remote island.

[o_e_l_e_o]

Many people lose money in LUNA and now many people lost money again in FTX (particularly investing into FTT token).

If you throw your money away at centralized shitcoins then this is to be expected. We've seen the exact same thing countless times before.

I personally don't use that exchange and I'm only using Binance

Don't fool yourself in to thinking Binance is any safer. Your coins are at risk.

Now, no matter how we take things here lightly, this is a very sad week for the whole cryptocurrency as this unfolding situation is a big blow to its core.

This is a big blow to centralized exchanges and centralized scam coins. It is not a big blow to bitcoin. If anything, the more people who avoid centralized exchanges in the future because of events like these, then the better for bitcoin long term.

Of course, am not worried of its survival because it will but this can surely set us many years backward.

It will set some individuals back many years if they have lost a large amount of their money to such a scam. It will not set bitcoin back at all. Go and read the bitcoin GitHub or the bitcoin mailing list. Development continues just as it always has, with not a single mention of these events. Bitcoin doesn't care for centralized exchange trash.

[DaveF]

You think this hack is bad, wait till Twitter gets hit since so many of their IT / Security people have been fired and quit.
But eliminating all other things I have been saying for years unless you have a controlled multiple verification setup for updating anything like this you are just asking for trouble.

Yes but as I posted someplace else, it's somewhat a false security.

Do you check the hash of the file you downloaded against what is posted?
Do you have automatic updates turned off on your phone and not update till people have verified the posted code is the same as what is in the app store / play store?

And as I posted in another thread unless there has been a 3rd party audit of how they push the update to the store this is all just security theater.

Think about it, if there are poor controls to upload the compiled file to the store then it's all pointless.
DaveF gets a job with bigwallet as their IT hardware person. It's open source, it's audited, it's amazing beautiful code.
Friday @ 4:30PM as everyone is leaving for the weekend I post a corrupt fund stealing compiled app to the app / play store and walk out of the building, head to the airport and fly to some island with no extradition. Saturday AM they have the bad wallet pulled but by then I have 1000s (10000s?) of BTC that were sent to me before anyone knew what happened. And I'm on a beach sipping drinks out of a coconut.

On the other hand the shitty closed source wallet needs 2 people with security dongles to log into the PC that updates the code that is in the app / play store.
You might not know what the code is, and it may be crap with bugs, but they at least know that what they wrote is what is up there.

However, since as far as I know NONE of them publish / publicly audit how they push updates to the stores it's all just trust.

You may feel differently. You may disagree. That is fine, but IMO it really needs to be discussed.

-Dave

This is an edge case with the exchange imploding and everything else happening. So it could be the owners doing it, or it could be a low lever programmer that had access he or she should not have had and found a way to run with the funds.

It will probably take years to know the truth and even then we will never truly 100% know. With enough money involved, it's not that hard.

Remember it does not matter if the evidence exists or not, I can find it...

https://www.youtube.com/watch?v=c7o1tg1r_DM

-Dave