On December 21, the cryptocurrency exchange EXMO suspended withdrawals after the theft of about 5% of its total assets.
Attention!
We detected suspicious withdrawal activity. All withdrawals are temporarily suspended. We’re investigating the issue and taking measures to protect your funds.
If any user fund is affected by this incident, it’ll be covered completely by EXMO.https://t.co/QCtOGRFE65— EXMO (@Exmo_Com) December 21, 2020
From 2:27 UTC, the exchange’s security team recorded several unauthorized withdrawals from hot wallets BTC, XRP, ZEC, USDT, ETC, and ETH.
“We responded immediately and moved the remaining funds from the compromised wallets,” EXMO said.
Representatives of the exchange have already filed a police report with London authorities and distributed transaction details to analytics systems, including CipherTrace. A list of addresses to which the stolen cryptocurrencies have been sent has also been published:
- BTC – 1A4PXZE5j8v7UuapYckq6fSegmY5i8uUyq;
- ETH – 0x4BA6B2fF35055aF5406923406442cD3aB29F50Ce;
- ETC – 0x4d9EF6846126Da2867AF503448be0508542C971e;
- XRP – rwU8rAiE2eyEPz3sikfbHuqCuiAtdXqa2v;
- ZEC – t1StUQiw1YyHT515xDxwxjfhEcw2iGSq2yL;
- USDT (ERC20) – 0xa910f92acdaf488fa6ef02174fb86208ad7722ba.
According to EXMO representatives, assets in cold storage are secure.
All withdrawals are currently suspended. Users are asked not to deposit to the EXMO custodial wallets.
Update: Preliminary estimates put EXMO’s losses at $10.5 million.
Hackers stole:
- 292 BTC (around $6.5 million), another 18.5 BTC ($415,000) awaiting confirmation in the mempool;
- 867 ETH (around $521,900);
- 476,521 XRP (around $247,700);
- 20,651 ETC ($126,800);
- 50,000 USDT ($50,000);
- 39,285 ZEC ($2.7 million).
Most of the funds have been sent to the Poloniex exchange.
Earlier in December, an unknown attacker withdrew from the Nexus Mutual founder Hugh Karp more than $8 million in native NXM tokens.
Follow ForkLog on Telegram: ForkLog Feed — the full news feed, ForkLog — the most important news and polls.