BTC $75,655.32 -6.14%
ETH $2,229.17 -8.24%
BNB $689.92 -3.32%
XRP $1.19 -8.98%
SOL $89.75 -6.73%
TRX $0.3187 +0.05%
DOGE $0.0717 -6.43%
ADA $0.1841 -6.89%
BCH $269.12 -5.03%
LINK $10.75 -7.05%
HYPE $77.59 -7.01%
AAVE $129.62 -2.52%
SUI $0.8598 -7.24%
XLM $0.1540 -7.99%
ZEC $1,263.70 -5.20%
AAPL $342.10 -2.34%
AMZN $258.52 -3.00%
GOOGL $283.42 -2.23%
MSFT $531.89 -3.97%
META $603.45 -4.28%
NVDA $185.65 -6.31%
TSLA $346.44 -8.30%
SNDK $855.79 -15.60%
INTC $54.18 -4.58%
SPCX $126.67 -5.46%
MU $686.99 -11.58%
AMD $424.35 -11.09%
BTC $75,655.32 -6.14%
ETH $2,229.17 -8.24%
BNB $689.92 -3.32%
XRP $1.19 -8.98%
SOL $89.75 -6.73%
TRX $0.3187 +0.05%
DOGE $0.0717 -6.43%
ADA $0.1841 -6.89%
BCH $269.12 -5.03%
LINK $10.75 -7.05%
HYPE $77.59 -7.01%
AAVE $129.62 -2.52%
SUI $0.8598 -7.24%
XLM $0.1540 -7.99%
ZEC $1,263.70 -5.20%
AAPL $342.10 -2.34%
AMZN $258.52 -3.00%
GOOGL $283.42 -2.23%
MSFT $531.89 -3.97%
META $603.45 -4.28%
NVDA $185.65 -6.31%
TSLA $346.44 -8.30%
SNDK $855.79 -15.60%
INTC $54.18 -4.58%
SPCX $126.67 -5.46%
MU $686.99 -11.58%
AMD $424.35 -11.09%

bitkub

All
Article
Flash

GCSA disclosed KuCoin phishing, Bitkub supply chain risks, and Avalanche contract vulnerabilities: attackers transferred approximately 1,013,400 USDC

According to GCSA monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing several recent security risks related to digital assets. Attackers impersonated security@ku.com to lure users into downloading remote control programs. GCSA found that the relevant domain names had not previously configured DMARC; after notification, KuCoin has completed rectification and enabled DMARC isolation policies.After the original MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. The installation method without a fixed version and the risk of plaintext keys may lead to credential leakage; there is currently no actual evidence of theft, and Bitkub has not yet responded to the notification.The TranchePool treasury within the Avalanche ecosystem was attacked due to a cross-day settlement logic flaw, where attackers utilized flash loans and repeated withdrawals to transfer approximately 1.0134 million USDC within 202 seconds. This incident is categorized as a vulnerability in the upper application, and the underlying network was not affected. GCSA stated that it has reported the clues to the relevant platforms and published the original analysis and evidence for industry reference.

Thailand's SEC accuses Bitkub executives of concealing a $50 million hacking loss and has filed a criminal complaint

The Securities and Exchange Commission (SEC) of Thailand has filed a criminal complaint against the cryptocurrency exchange Bitkub Online and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, accusing them of submitting false financial reports between May and October 2021. The case has been handed over to the Economic Crime Suppression Division (ECD) of Thailand for investigation, and the prosecution will decide whether to formally charge them.The SEC stated that Bitkub suffered a cyber attack in May 2021, resulting in the theft of 16 types of digital assets, with losses exceeding $50 million. Regulatory investigations revealed that Bitkub did not reflect the relevant losses in its daily net capital report Form DA 1 from May 10 to October 30, 2021. The SEC alleged that the relevant executives made false statements in the company's official documents, leading regulators to believe that customer assets were intact and that the company had not suffered financial losses. Bitkub subsequently completed the acquisition of alternative assets in late October 2021, but the SEC believes that the reports during this period constituted false statements.In a statement on July 23, Bitkub asserted that existing customer holdings are secure and accounts are complete. Bitkub stated that its co-founders purchased alternative assets in the same quantity and currency to cover the losses and claimed that the cyber theft incident was reported to law enforcement on May 10, 2021.

The Thai SEC has filed a criminal lawsuit against Bitkub, accusing it of concealing a hacker attack of approximately 50 million dollars in 2021

According to Cointelegraph, the Securities and Exchange Commission (SEC) of Thailand has filed a criminal complaint against the digital asset exchange Bitkub Online and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, accusing them of involvement in false reports related to a cyber attack in 2021.The SEC stated that a cyber attack in May 2021 resulted in the theft of 16 digital assets from Bitkub, valued at approximately 1.7 billion Thai Baht, or about 50 million USD. The regulatory agency claimed that Bitkub subsequently replenished the stolen assets before October 31, 2021, but the daily net capital flow reports submitted from May 10 to October 30, 2021, did not accurately reflect the reduction in assets.Bitkub stated on the X platform that the case stems from disclosure decisions made after the cyber attack in May 2021 and is not an act of fraud. The exchange claimed that the delay in disclosing the compromised wallet was to avoid a bank run, and the co-founder subsequently purchased an equivalent amount of digital assets to cover the stolen funds, with no financial losses incurred by the company or its clients. Bitkub was established in 2018 and is one of Thailand's major cryptocurrency exchanges. Bitkub's parent company is considering a potential initial public offering, including the possibility of listing in Hong Kong.
app_icon
ChainCatcher Building the Web3 world with innovations.