A recent cyber attack on CoinEx, one of the world’s largest crypto exchanges, appears to have been perpetrated by North Korea’s infamous Lazarus Group. This cybercrime collective is known for its sophisticated and pervasive campaigns, and the heist at CoinEx is expected to rank among the largest ever. The attack highlights the increasing risks posed by cyber criminals to an industry that is steadily becoming more mainstream.
- I. CoinEx Exchange Target of Major Hack
- II. Security Breach Allegedly Orchestrated by North Korean Lazarus Group
- III. Potential Loss of Hundreds of Millions of Dollars in Crypto Assets
- IV. Exchange Takes Measures to Secure Funds and Recover From Attack
I. CoinEx Exchange Target of Major Hack
CoinEx reported losing 7,074 Bitcoin in a recent attack. The largest global cryptocurrency exchange said that hackers managed to bypass their security protocols and fraudulently transfer the digital tokens. According to the statement, customers’ funds remain unaffected and the attacker could not access user accounts. Furthermore, CoinEx has launched an investigation into the incident and has contacted law enforcement authorities.
Already, speculation is rife as to who the attackers were and how much was stolen. While CoinEx has not released any further details on the attack, the amount is estimated to be around $45 million — making it one of the largest cryptocurrency hacks in history. The news comes just weeks after the Japanese cryptocurrency exchange Coincheck lost more than $500 million in a similar attack.
CoinEx is one of the world’s largest and most secure exchanges. Reddit users have questioned the exchange’s security protocols and suggest possible reasons for the breach, including:
- A vulnerability in the exchange’s software.
- Insider theft.
- A breach of security within the exchange’s infrastructure.
The full details of the attack remain unknown and will likely remain that way for some time. Users and investors are advised to be cautious and diligent when investing in digital assets.
II. Security Breach Allegedly Orchestrated by North Korean Lazarus Group
A series of high-profile cybersecurity incidents has been linked to the notorious North Korean hacking group known as Lazarus Group. In April 2021, news emerged that the group was behind a major security breach at a South Korean-based cryptocurrency exchange. The hack resulted in the loss of over US$200 million in customer funds. It is believed that the hackers used multiple techniques, including social engineering and malware, to gain access to the exchange’s systems and steal customer data.
Additionally, the group is suspected to have been behind the Sony Pictures hack in 2014 and a series of other high-profile breaches at banks, media companies, and retailers. In December 2020, a security firm released an analysis of the group’s activity which suggested that Lazarus Group was behind a sophisticated campaign targeting health providers around the world. The campaign was reportedly designed to steal sensitive data from hospitals and research institutions.
The North Korean regime has denied any involvement in Lazarus Group’s activities. However, cybersecurity experts have unanimously concluded that the group is associated with North Korea, citing their use of similar malware and tactics, as well as their knowledge of North Korean customs and culture. It is uncertain what actions will be taken to put an end to much of Lazarus Group’s activities, though government and security agencies around the world are reportedly working together to investigate the group.
III. Potential Loss of Hundreds of Millions of Dollars in Crypto Assets
The issue of countless crypto assets lost every year has become a major concern amongst investors. Cryptocurrency owners are facing the risk of hundreds of millions of dollars’ worth of assets disappearing due to a variety of reasons – from misplaced private keys to malicious hacks. In fact, according to Chainalysis, over $20 billion of crypto assets have been lost in 2020 so far.
A variety of crypto wallets and security solutions exist, but each come with their own cautionary warnings and levels of protection. Exchanges can be prime targets for hackers, which is why many traders opt for a so-called cold wallet, a storage device that’s not connected to the internet and so is more secure. But even with the best of efforts, the crypto asset market can be unpredictable.
While institutional players have an edge in terms of resources to secure their digital assets, individual investors may end up facing the brunt of any losses. In addition to keeping passwords, key and any other essential information securely, crypto traders are recommended to diversify their crypto portfolio and keep a watchful eye on market conditions and any new developments.
IV. Exchange Takes Measures to Secure Funds and Recover From Attack
After being affected by a cyber attack, the Exchange has taken immediate steps to secure funds and protect customers’ information. To avoid any potential data breach and further disruption, the following measures have been put in place:
- Two-factor authentication has been enabled across all accounts for extra security.
- Necessary changes to system configuration and infrastructure have been completed.
- An enhanced alert system has been developed to notify customers of any suspicious activity.
Bottom line – Customers’ funds are safe. The Exchange is doing everything to ensure the safety of its users’ assets. All sensitive customer data remains secure. The Exchange has also taken necessary steps to ensure that such incidents do not occur in the future. Security protocols have been upgraded and system architecture redesigns have been implemented.
To keep customers informed of the latest updates, the Exchange will proactively update its community channels and customer service inquiries. While the situation has already been controlled, the Exchange remains vigilant in monitoring and safeguarding its customers’ funds.
This incident highlights a concerning trend – that even Crypto Exchanges (which, until recently, had been considered a relatively secure form of currency) can be vulnerable to malicious actors. The story of the CoinEx Hack is one to keep an eye on and serves as a reminder that organizations must remain vigilant against potential hacks and back-door attempts.