Bithumb Hacked (Once Again), Hacker Stole $19 Million in Cryptocurrencies

Hackers yesterday stole nearly $13 million worth of cryptocurrency from

Bithumb

, the South Korea-based popular cryptocurrency exchange admitted today.

According to Primitive Ventures' Dovey Wan, who first broke the information on social media, hackers managed to compromise a number of Bithumb's hot EOS and XRP wallets and transferred around 3 million EOS and 20,000,000 XRP to his newly-created accounts.

The hacker then distributedly transferred the stolen digital assets to his different accounts created on other cryptocurrency exchanges, including Huobi, HitBTC, WB, and EXmo, via

ChangeNow

, a non-custodial crypto swap platform does not require KYC/account.

Bithumb has been hacked for the second time. Last time the popular Bitcoin and Ether cryptocurrencies

exchange was hacked in 2017

when hackers compromised a number of wallets belonging to its users and stole their funds.

"And this is the second time Bithumb saw a MAJOR hack, last time it was hacked with a loss over $30m.. lol and after the first hack it was STILL able to get the fiat license from Korea and WTF??" Wan says on Twitter.

It has been reported that the private key for the EOS hot wallet account belonging to Bithumb was stolen (address

g4ydomrxhege

), which allowed the hacker to transfer the funds to his address, "

ifguz3chmamg

."

The above image

shared

by Changpeng Zhao, CEO of Binance cryptocurrency exchange, explains how hacker distributed his funds after stealing it from Bithumb.

Here's how the hacker distributed and transferred the stolen funds to his accounts on different exchanges:

• EXMO: 662,600
• Huobi: 263,605
• Changelly 143,511
• KuCoin: 96,270
• CoinSwitch: 38,725

According to a

blog post

published by the company today, Bithumb is still investigating the hack, which it believes was performed with the help of an insider, and has reported the breach incident to security firm Korea Internet and Security Agency (KISA).

"We deeply apologize to our members for delaying the cryptocurrency deposit and withdrawal service," Bithumb said.

"As a result of the inspection, it is judged that the incident is an accident involving insiders because the external intrusion path has not been revealed until now. Based on the facts, we are conducting intensive investigations with KISA, Cyber ​​Police Agency and security companies."

Meanwhile, Bithumb said the company is working with major cryptocurrency exchanges and foundations in hope to recover the loss of the cryptocurrency equivalent.

from The Hacker News https://ift.tt/2OwYlB1