{"id":16870,"date":"2024-09-11T12:16:17","date_gmt":"2024-09-11T09:16:17","guid":{"rendered":"https:\/\/forklog.com\/en\/indodax-exchange-hacked-for-22-million-experts-report\/"},"modified":"2024-09-11T12:16:17","modified_gmt":"2024-09-11T09:16:17","slug":"indodax-exchange-hacked-for-22-million-experts-report","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/indodax-exchange-hacked-for-22-million-experts-report\/","title":{"rendered":"Indodax Exchange Hacked for $22 Million, Experts Report"},"content":{"rendered":"<p>The Indonesian cryptocurrency exchange Indodax has reportedly lost approximately $22 million in various crypto assets due to a potential hack.\u00a0<\/p>\n<p>On September 11, security firms PeckShield, Cyvers, and SlowMist alerted the public to a fund leakage from the Indodax platform. The estimated loss includes around $22 million in BTC, POL, OP, USDT, USDC, ARB, and numerous other assets.\u00a0<\/p>\n<blockquote class=\"twitter-tweet\" data-media-max-width=\"560\">\n<p lang=\"en\" dir=\"ltr\">?SlowMist Security Alert?<\/p>\n<p>Indonesian crypto exchange <a href=\"https:\/\/twitter.com\/indodax?ref_src=twsrc%5Etfw\">@indodax<\/a> suffered an attack a few hours ago, with the hacker stealing various tokens from hot wallets. The total loss is approximately $22 million?. Below are the details of the losses\u2b07\ufe0f <a href=\"https:\/\/t.co\/r4i0rBbctJ\">pic.twitter.com\/r4i0rBbctJ<\/a><\/p>\n<p>\u2014 SlowMist (@SlowMist_Team) <a href=\"https:\/\/twitter.com\/SlowMist_Team\/status\/1833707952353812782?ref_src=twsrc%5Etfw\">September 11, 2024<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>According to Cyvers, the hackers have begun exchanging the stolen tokens for ETH.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">?ALERT?Hey <a href=\"https:\/\/twitter.com\/indodax?ref_src=twsrc%5Etfw\">@indodax<\/a> , Our system has detected multiple suspicious transactions involving your wallets on different networks. Suspicious address already holds 14.4 million USD and swapping the tokens to Ether.<\/p>\n<p>Want to keep your company off our alerts radar? Learn how to secure\u2026 <a href=\"https:\/\/t.co\/Lzpi5uthXS\">pic.twitter.com\/Lzpi5uthXS<\/a><\/p>\n<p>\u2014 ? Cyvers Alerts ? (@CyversAlerts) <a href=\"https:\/\/twitter.com\/CyversAlerts\/status\/1833629057256239175?ref_src=twsrc%5Etfw\">September 10, 2024<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>SlowMist ruled out the possibility of a hot wallet breach. Experts suggest that the withdrawal system may have been targeted.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">1\u20e3 Based on our analysis?, we can rule out the possibility that the hot wallet has been compromised. It is possible that the withdrawal system has been hacked.<\/p>\n<p>?Let&#8217;s dive into it.<\/p>\n<p>Here are the hacked bitcoin transactions. The stolen funds were withdrawn from the Indodax\u2026 <a href=\"https:\/\/t.co\/hQb0o4ljW8\">https:\/\/t.co\/hQb0o4ljW8<\/a> <a href=\"https:\/\/t.co\/YCHYX1kg2y\">pic.twitter.com\/YCHYX1kg2y<\/a><\/p>\n<p>\u2014 SlowMist (@SlowMist_Team) <a href=\"https:\/\/twitter.com\/SlowMist_Team\/status\/1833757841880158673?ref_src=twsrc%5Etfw\">September 11, 2024<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Cyvers speculated that the North Korean hacker group Lazarus might be behind the attack.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">UPDATE: &#8220;THE PATTERN AND THE CHARACTERISTICS OF THE [INDODAX] ATTACK HIGHLY RESEMBLE THOSE OF NORTH KOREA&#8217;S LAZARUS GROUP,&#8221; YOSI HAMMER, HEAD OF AI, CYVERS, TOLD BSCN <a href=\"https:\/\/t.co\/EC0t9WxD25\">https:\/\/t.co\/EC0t9WxD25<\/a><\/p>\n<p>\u2014 BSCN Headlines (@BSCNheadlines) <a href=\"https:\/\/twitter.com\/BSCNheadlines\/status\/1833762147135844421?ref_src=twsrc%5Etfw\">September 11, 2024<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The exchange has gone into maintenance mode. The homepage states that the system is being updated to enhance transaction convenience.\u00a0<\/p>\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXfW4uTp7NtBr0FX_w8kwCU6jlISUSVKP6GXalEbehzdUDXjqXZ4Qxi1ADbWs9tnSJKzFnZ4OWfsUoiT4xP55zpTed7npN0yyXi7XtiMn8ZXj7HmK0Z3PkRyqHeEwbLEI8xu9h1LO-sJyYqEbCcYOHy_51g?key=QU-IiunEhmJxqrWTL05Q4A\" alt=\"\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 Indodax \u043d\u0430 $22 \u043c\u043b\u043d\"\/><figcaption class=\"wp-element-caption\">Indodax homepage. Source: <a href=\"https:\/\/indodax.com\/\">Indodax website<\/a>.<\/figcaption><\/figure>\n<p>Indodax confirmed a potential vulnerability in the platform&#8217;s security system, assuring that user funds will remain unaffected and balances will be unchanged after the update.\u00a0<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"in\" dir=\"ltr\">Halo Member INDODAX,<\/p>\n<p>Kami ingin menginformasikan bahwa team security kami menemukan potensi indikasi keamanan pada platform kami. <\/p>\n<p>Saat ini, kami sedang melakukan pemeliharaan menyeluruh untuk memastikan seluruh sistem beroperasi dengan baik. Selama proses pemeliharaan ini,\u2026 <a href=\"https:\/\/t.co\/kYAc6ilERF\">pic.twitter.com\/kYAc6ilERF<\/a><\/p>\n<p>\u2014 indodax (@indodax) <a href=\"https:\/\/twitter.com\/indodax\/status\/1833681240735760633?ref_src=twsrc%5Etfw\">September 11, 2024<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>During the maintenance period, Indodax launched a giveaway for comments on Instagram.\u00a0<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"in\" dir=\"ltr\">\u203c\ufe0fGIVEAWAY Nungguin INDODAX\u203c\ufe0f<\/p>\n<p>Nungguin sistem INDODAX up karena maintenance? Ada giveaway sebesar total 3 JUTA RUPIAH tiap 1 jam untuk 3 orang pemenang selama masih maintenance.<\/p>\n<p>Caranya gampang, tulis di komentar Instagram <a href=\"https:\/\/twitter.com\/indodax?ref_src=twsrc%5Etfw\">@indodax<\/a> alasan kenapa trading kripto di INDODAX.\u2026<\/p>\n<p>\u2014 indodax (@indodax) <a href=\"https:\/\/twitter.com\/indodax\/status\/1833763291040219523?ref_src=twsrc%5Etfw\">September 11, 2024<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>According to CoinMarketCap, Indodax&#8217;s total asset volume is $368 million.\u00a0<\/p>\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXcRq2yFCBq5QkFzA-bMJ98C4aA1-akHZTJXffrjHXHjLiddO_mgYSW3-CmVrqLMjdeh2k9nSU8waMem_Q2jGNiGluX3dRCezC_svl-eEyMhXmkx5v8YONtHU6NmZRyIV4EN8nxG4UKTr17VGAP1i1NdUrY0?key=QU-IiunEhmJxqrWTL05Q4A\" alt=\"\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 Indodax \u043d\u0430 $22 \u043c\u043b\u043d\"\/><figcaption class=\"wp-element-caption\">Source: <a href=\"https:\/\/coinmarketcap.com\/exchanges\/indodax\/\">CoinMarketCap<\/a>.<\/figcaption><\/figure>\n<p>In July, on-chain researcher ZachXBT <a href=\"https:\/\/u1f987.com\/en\/news\/expert-traces-stolen-dmm-bitcoin-assets\">linked<\/a> the hack of the DMM Bitcoin exchange to the actions of Lazarus.<\/p>\n<p>Back in May, the Japan-based platform <a href=\"https:\/\/u1f987.com\/en\/news\/dmm-bitcoin-exchange-hacked-for-305-million\">lost $305 million in Bitcoin<\/a> due to an attack.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Indonesian cryptocurrency exchange Indodax has reportedly lost approximately $22 million in various crypto assets due to a potential hack.\u00a0 On September 11, security firms PeckShield, Cyvers, and SlowMist alerted the public to a fund leakage from the Indodax platform. The estimated loss includes around $22 million in BTC, POL, OP, USDT, USDC, ARB, and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":16869,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"","news_style_id":"","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1166,44,1111],"class_list":["post-16870","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-centralized-exchanges-cex","tag-cybercrime","tag-cybersecurity"],"aioseo_notices":[],"amp_enabled":true,"views":"18","promo_type":"","layout_type":"","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/16870","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=16870"}],"version-history":[{"count":0,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/16870\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/16869"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=16870"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=16870"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=16870"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}