Topic: eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20 - page 4. (Read 15019 times)

Hey everyone,

Yesterday I had my entire life savings of $211,000 stolen from me and the scammers sent it to a crypto exchange platform eXch.cx It was a total of 62 eth. This was literally all the money that I been working with to help my mom who is dying right now from heart disease. I know the whole point of crypto is to be anonymous but please I really need your help, this was everything that I had and it was for my family and to survive. I never clicked on any airdrop scam or link so I’m pretty sure I was hacked in some sophisticated manner. I already got a police report which I can show and also I hired someone to do an investigative report log showing the exact trace from my trust wallet account into the final destination which is the scammers wallet and exchange he sent it to. I am a new user here and can not direct message the moderator for the https://exch.cx which he posted on this forum and his username is eXch. Please if somebody can reach out to him and ask to freeze the assets that would mean the world. I am in a very bad place right now in my life
Link: https://bitcointalksearch.org/topic/exch-instant-exchange-btc-ln-xmr-ltc-eth-erc20-577207

The scammer's addresses are 0x73f8a08aadcfd850e1a0ff18c0ea12f634775813 and 0xfaa7a4e434a33289c2f257876bc7e1bafd328577which were made on the eXch platform, then the scammers exchanged the ETH and send them to the main eXch 0xf1da173228fcf015f43f3ea15abbb51f0d8f1123 wallet



————-  below is the investigative report —————

On-chain investigation report
0x32d502fdf445a7d76b16a65d83bbdfa796628ce6 (my trust wallet)

On 04/03/24 hackers 0xed4dcc6bcbc850db680061ab28c5280cc93a9374 sent 0.15 ETH
(0x6389e5f2fbc06039e7778e9908d5ad81a50a761ace6fdfd08efee152a8ea5acd) to
0x32d502fdf445a7d76b16a65d83bbdfa796628ce6 presumably to use that amount for transaction
fees.
0xeD4DCC6BcBC850db680061Ab28c5280CC93A9374 had the last transfer
(0x744c3225cb3b7d8d676e6a5300dac7c5f7978a7f4821d53f844b039217b41e6b) to a MEXC
Global 0x8aa62b26c934af89d4e91b36fb7b5e329f53c5f2 personal address and then cashed out
(0xa75d082b41941c945e58242d8f83c5c739f234b921f59c9f8b0c94da0805d521) to
0x75e89d5979e4f6fba9f97c104c2f0afb3f1dcb88 MEXC Global main address of the exchange.

From the victim’s 0x32d502fdf445a7d76b16a65d83bbdfa796628ce6 address the hackers
transferred crypto tokens:
• 0xb7310125fcdf002089aff053f1a62b99eaa9c3ac6df6145c9a06cc612359e05b
• 0x94abf156a49d27898d115527c9a484c4712cc6230d715bcd8b981daffc5fed06
• 0x1b4ffb10b7186b4dfba2061321c3a0245f79ac0812251dc06e40518b56286fea
• 0x2786e3f48ce88df1c7504c3605235d0d6e6859e57042fdc8db5e8748f7c5ff91
• 0x147c1d9d295d2548d055373333118ab57bdf025338d667b7fba3ad7cdb8113b5

On the same day they also transferred 0.15 ETH
0x0edfd4402cf10d3e1f566609ddc783dc461bc42f69919acd75119fdfde7e4100 to
0x9987baf72097277efc52fb5307b9d2b98255142c address.

All the stolen from 0x32d502fdf445a7d76b16a65d83bbdfa796628ce6 crypto went to that
address.
Then the hacker swapped the stolen tokens to ETH:
• 0xffb52caa42fd8c7a0f1733227089339ee5d302173f8c4dec2550fa72132b8bcc
• 0x63d51fba10a001f6a9871d12ee3ea15273828ca48f376819ccbe1572d7cbe581
• 0x1b4ffb10b7186b4dfba2061321c3a0245f79ac0812251dc06e40518b56286fea
• 0x2786e3f48ce88df1c7504c3605235d0d6e6859e57042fdc8db5e8748f7c5ff91
• 0x147c1d9d295d2548d055373333118ab57bdf025338d667b7fba3ad7cdb8113b5
• 0xa1c290774dafe5dad8c2db41dd44d0ed87ecf02acf2073d35a207304ca369b57
• 0xcd2aebe8b87c4d300f56aa3272404b0e9e4114ccb8e4d9e139de0d36c18e1982
• 0xaf1e1710a69aacc6d51fe03326d4bdb2f76caaafeabd618348399de5b19e347f
• 0x2b40d0edc6d42c2ba41ba148830fa7016da3bbb7649395518bab1387ccb067ef

And transferred them
(0x07d7eed9dabe1c2f10dd447b43d3faf272d22146686bc3c25bfa3a719c659a43,
0x36bae030cccae8be6239962f88eab31badfcbcaf7c9f8c0ce9985b1432a81b68) to disposable
eXch exchange addresses (0x73f8a08aadcfd850e1a0ff18c0ea12f634775813 and
0xfaa7a4e434a33289c2f257876bc7e1bafd328577 respectively) for the purpose of 1 transaction
(0xa4d2cb52205a3f679a8cc64538f1d55af1be8b79f3c6d38d860788feb47dc43e and
0x7973f8bcdca8473a3d5c6ef11f4e96bb7d1d7030d36005b74a0fecd817ae022b respectively) on
the main eXch exchange address 0xf1da173228fcf015f43f3ea15abbb51f0d8f1123 (with
thousands of transactions).
eXch exchange can be contacted to freeze the operation and continue the investigation
https://exch.cx/support .

I was unlocky so far in these raffles, but hopes dies last

I just registered for this one and I want to thank again to eXch and paid2 for offering these collectibles, respectively for organizing the free raffles. I announced this raffle too in the Romanian translation of OP and also in the thread dedicated for contests

Good luck again to all participants!

Oh my god. Normally I am the unluckiest person in the room, but today was my lucky day. Thanks paid2. Thanks everyone! Good luck in the next one!

The first of the Capsules are being sent out today! 

https://talkimg.com/images/2024/02/28/f2pW5.png

You can join the new Free Raffle and try to win a nice Custom eXch Cryptosteel Capsule!   

[FREE RAFFLE] - Custom eXch Cryptosteel Capsule (#5)!

You can join the new Free Raffle and try to win a nice Custom eXch Cryptosteel Capsule!   

When will you start accepting Solana?

It is possible that Solana and some more popular currencies will be added, but we will await till the end of some hype trends first, because currently it's hard to tell whether Solana's popularity increase is natural or made up, but of course Visa's adoption is a serious step for it (but let's see if they don't change their mind?). We are also awaiting for more audits in regards to their code and network decentralization.

The morale of this story is that the more you try to favor your enemy (state and chain analysis platforms) hoping you won't get a hit - the harder they will backstab you.

Echangere has shutdown

It is with a very heavy heart that we regret to inform you that Echangere has shutdown operations for now. As some might have noticed, we have been very quiet for the last month. The reason being that we found out, our current model for operations was unlawful. In order for Echangere to become lawful we would be required to do full KYC on our users. This means we essentially need to become eyes and ears for the government and inform them every time a user would do anything out of the “norm”. Now as most of you know, we did not require full KYC, only basic information. This is because we believe it is wrong for a private company/business to hold such sensitive information like a government ID on its users.

Acting as cops and giving into the already huge surveillance is not something we want to participate in. The way the regulation and rules are put together breaks with the principals of the western world. Instead of being innocent until proven guilty, it turns things around making everyone guilty until proven innocent. This is not something we want to support. We believe the systems we had put in place were more than enough to determine the validity of users, and the funds moving in and out of our platform. The absurd thing is, Echangere never got off the ground. We never had any money flow through our platform, but we are apparently still required to abide by the same rules as centralized exchanges. We believe it is wrong that the law does not have minimum amounts before a business needs to become regulated with full KYC on its users. With regulation acting as such on Peer-to-Peer Marketplaces we essentially lose our number one market advantage of not being full KYC. If Peer-to-Peer Marketplaces are regulated in the same way as centralized exchanges, then the end-user would almost always pick the CEX, as that removes the risk of dealing with another person. Even though the P2P has the escrow that protects the end-user, then not dealing with another person is preferred by most. Therefore it no longer makes sense for us to run Echangere, when we need to be regulated as such with full KYC. We believed that since we did not touch fiat currency in any capacity that, that would make it all be clear. Most governments do not recognize cryptocurrency in any sense of the word. But apparently, they recognize it enough to the point that if you touch it, you must follow all kinds of crazy rules… This does not make sense. As stated from the beginning we are committed to comply with rules and regulations as long as they are possible to follow. We would like to be compliant with AML and KYC, but we will not participate in the surveillance state. In order to comply with AML and KYC we had various systems put in place to prevent fraud, money laundering and other illegal activities. We believe KYC is not only looking at a government issued ID, as our approach was determining users based on the information they submitted. We live in 2023 and most people leave all kinds of digital footprints behind, that can be used to determine the validity of a user, therefore KYC.

We have spent the last month going over each and every possibility in order to keep being in operations, such as: going offshore, going decentralized, raising capital and going full KYC. Now none of these sound particularly interesting in our ears. As you know Echangere was made from scratch as a father and son project, and we intended to keep it as such. We are very sad that Echangere has not even reached the broader market, and even proven its worth. We had to shut it down before the party began.

The future of Echangere is uncertain, but since all our infrastructure is made from scratch, we will properly pursue what we already had planned such as launching a variety of bi-products like payment gateways, donation gateways, B2B custodial service, B2B escrow service and more. But all this requires a lot of time spent in development and comes with its own challenges in terms of regulation. The difference being B2B would be a KYB and not KYC.

Right now with the sad closure of Echangere our new focus will be on a bi-product we had planned called depouch. depouch is an upcoming Cross-Chain DeFi application and wallet with focus on user-experience. It will allow people to swap layer 1 cryptocurrencies without KYC and registration. You will have full self-custody and depouch is 100% decentralized. It is a mere interface to the blockchain. We look forward to bringing this to the market in these times of darkness. If you want to stay updated on depouch you can do so by following our twitter @depouch.

We thank you for your understanding, and we hope you will join us in this freedom fight we are all fighting.
It is time we say stop to the crazy rules and regulations that destroy innovation and free market competition.
With that said, we hope to see you all trying depouch sometime in the future.

Best wishes
Thorbjørn “BubbiByte” Breum
&
Carsten Breum

I would always suggest checking out and using eXch official onion link, this is harder to DDOS attack and it is better for privacy.
Better to bookmark onion link in Tor browser to avoid phishing attacks.

Not at all - if you check some mixers who had/have vanity generated addresses, they were/are targeted even more with vanity-generated phishing. Phishing by typosquatting is something much more effective than email spam nowadays.

In the meantime, it looks like eXch is under DDoS attack  

Thanks again eXch and paid2 for these raffles! I hope I will be more lucky this time And, of course, I wish good luck to all participants!

This raffle was properly highlighted in the Romanian translation of OP and also in the dedicated thread we have in our local board.

Feel free to join our 4^th free raffle and try your luck to win a nice Custom eXch CryptoSteel Capsule 

As you can see above eXch's answer was "no".

I can say from my own experience, half a year ago, when I needed to exchange bitcoins for the dollar equivalent, I first turned my attention to Ledger Live, and after I was horrified to see a 5% commission, I realized that eXch’s commission costs of 0.5% seem simply incredible (btw, I already have Trezor). But before the exchange, I was also bothered by the same question... so I decided to turn to statistics, according to which over the past few years, a total of 1300 USDT addresses and 300 USDC addresses have been blocked.

For this reason, I chose DAI.