Mixin Network hacked - $200 Million lost - page 2.

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: BABY SHOES on September 25, 2023, 01:01:19 AM

Today's breaking news - that Mixin Network's cloud database has been attacked resulting in the loss of several mainnet assets and that's what the official statement on Twitter says.
[1] https://twitter.com/MixinKernel/status/1706139175018529139

It is said that the incident occurred on September 23, 2023 and only today the founder of Mixin Network held a press conference at the media in Hong Kong time to reveal this problem occurred.

SlowMist as the blockchain security advisor will continue to own this case and they will provide updates.
[2] https://twitter.com/SlowMist_Team/status/1706133260869468503

Quote

Deposit and withdrawal services on Mixin Network have been temporarily suspended.

It is very sad to see something like this to happen, specially when their service was so active here in bitcointalk community

On the other hand, we can see how custodial services are risky for both parts. The administration of Mixin is now responsible for third party funds that were lost, and the users who trusted them now lost their money.

I always say: keep your bitcoin in a hardware wallet. This is by far the most tested and the safest option

Faisal2202

hero member

Activity: 1428

Merit: 513

Payment Gateway Allows Recurring Payments

Quote from: AbuBhakar on September 25, 2023, 12:00:44 PM

Quote from: Faisal2202 on September 25, 2023, 11:52:00 AM

I was quite impressed by the Mixin network because I tested it out, but after hearing that they have been hacked and also lost $200 million, I am quite sad and impressed too. Because I did not think that the company would have gathered that much funds in their little timespan. I do know they are ~~now~~ not new in the market, but we came to know about them recently.

The Mixin Safe is their new product but the Mixin company is not new since their launch their IDO during 2017 and manage to get huge funds from VC and other investors since Network project that time is very popular. This is really a huge loss since their company valuation is just 1B while the scam amount is 20% of their total asset plus their brand will surely be tainted with criticism since they promote asset safety.

It's really sad what happened to them since they are very generous to the forum through their campaigns here. I just hope that they recover lost funds from hackers since chain analysis is good now for tracking scam tokens.

Oops, that was a spelling mistake, I wanted to write not but it was written as now, maybe Grammarly mistakenly autocorrected it. Well, I also knew that they are now new as during their review, I got to know a lot about them. And yes that's so unfortunate that they faced this hack and lost also now they will be criticized too. But what can be done now,

AbuBhakar

hero member

Activity: 1120

Merit: 554

🇵🇭

Quote from: Faisal2202 on September 25, 2023, 11:52:00 AM

I was quite impressed by the Mixin network because I tested it out, but after hearing that they have been hacked and also lost $200 million, I am quite sad and impressed too. Because I did not think that the company would have gathered that much funds in their little timespan. I do know they are now new in the market, but we came to know about them recently.

The Mixin Safe is their new product but the Mixin company is not new since their launch their IDO during 2017 and manage to get huge funds from VC and other investors since Network project that time is very popular. This is really a huge loss since their company valuation is just 1B while the scam amount is 20% of their total asset plus their brand will surely be tainted with criticism since they promote asset safety.

It's really sad what happened to them since they are very generous to the forum through their campaigns here. I just hope that they recover lost funds from hackers since chain analysis is good now for tracking scam tokens.

Faisal2202

hero member

Activity: 1428

Merit: 513

Payment Gateway Allows Recurring Payments

I was quite impressed by the Mixin network because I tested it out, but after hearing that they have been hacked and also lost $200 million, I am quite sad and impressed too. Because I did not think that the company would have gathered that much funds in their little timespan. I do know they are now new in the market, but we came to know about them recently.

I hope this is not another strategy to make themselves famous among others, because no other strategy would have gained them this much audience or attraction.

No wonder this strategy have drawbacks but they are for temporary, like with time, things will be cover in dust and people will forget about it and in some time like 2 or 4 years after, people will start to use it as of their first priority.

ajiz138

hero member

Activity: 1498

Merit: 785

Quote from: Die_empty on September 25, 2023, 03:20:58 AM

They have a running campaign and conducted one of the highest review campaigns in the forum. The Mixin review employed 100 members and paid the highest amount and members were even paid upfront. They have suspended both deposits and withdrawals which means customers will wait to get more information from the management.

Shocking news!

I was one of the participants who took part in this review at that time, which was fine.
In other words, deposits and withdrawals are suspended - I checked in Mixin messenger and Mixin safe there was no warning whatsoever when clicking recieved/deposit, a little confused they didn't actually completely disable deposits and withdrawals.

Quote from: Die_empty on September 25, 2023, 03:20:58 AM

It is better to take the risk of keeping your investment than to surrender it to a centralized firm. All those privacy adverts are just marketing strategies to attract customers. I have used their services, and although it was a little bit confusing everything worked perfectly. It is always important not to keep large funds in these custodian websites regardless of how trustworthy they look.

Yes, it's better to HODL it yourself than to hand it over, still leave it to them, it's a third party, even if there's a hacking disaster, we can't do much even though it's a web custodian.

Z-tight

legendary

Activity: 994

Merit: 1089

Quote from: Beerwizzard on September 25, 2023, 07:35:28 AM

In case with Binance, funds are safu not because they say it, but because it is not possible to steal all funds (they are not so centralized) and all losses would be repaid by Binance simply because they are fucking rich and can afford doing so. There is no accent on hacking impossibility.

Binance is a totally centralized exchange which can and has even been hacked previously, you are right that Binance hasn't had any 'major hacking' incident on its platform, but take note that no centralized exchange is too big to fail, not even Binance, and if a severe bank run happens in Binance for whatever reason or if Binance suffers a major hack, they would find it very hard to refund their customers.

You can only be sure of the security of your funds if you have adequately secured it in your self custody wallet, you should not trust a centralized exchange that operates through fractional reserve scam. If you store your funds in Binance, you better move it into your own self custody wallet.

Beerwizzard

full member

Activity: 924

Merit: 148

Quote from: Z-tight on September 25, 2023, 05:11:53 AM

Quote from: Beerwizzard on September 25, 2023, 02:28:53 AM

The irony is that the big bold headline in the middle of Mixin website says "Secure Digital Assets and Messages on Mixin" and apparently it turned out that the platform itself is actually not secure.

They were not going to tell their potential customers that they would lose money if they used their service, were they? It is not just about mixin safe only, but centralized services and platforms that have a single point of failure, the management may not be malicious and they might just want to render a service to people and make profit, but once there is a single point of failure it becomes very vulnerable to hackers who can exploit it and steal either funds or personal data.

Wasabi now funds a blockchain analysis company to spy on utxo's before they are allowed to participate in their Coinjoin or not, but they advertise themselves as the ultimate privacy solution, Binance says funds are safu when they can be hacked at anytime, so yeah, it is just PR and it is left for people to do their research about whatsoever service they are using.

Sure. It is always possible that centralized wallet get hacked and if it happens, the project's team will have to take all legal actions to repay their users if they can. However, the point is in kind of a "Fake it till you make it" attitude towards their marketing where the team makes a headline claiming their project is safe as fuck highlighting the highest level of security and getting hacked.

In case with Binance, funds are safu not because they say it, but because it is not possible to steal all funds (they are not so centralized) and all losses would be repaid by Binance simply because they are fucking rich and can afford doing so. There is no accent on hacking impossibility.

Z-tight

legendary

Activity: 994

Merit: 1089

Quote from: Beerwizzard on September 25, 2023, 02:28:53 AM

The irony is that the big bold headline in the middle of Mixin website says "Secure Digital Assets and Messages on Mixin" and apparently it turned out that the platform itself is actually not secure.

They were not going to tell their potential customers that they would lose money if they used their service, were they? It is not just about mixin safe only, but centralized services and platforms that have a single point of failure, the management may not be malicious and they might just want to render a service to people and make profit, but once there is a single point of failure it becomes very vulnerable to hackers who can exploit it and steal either funds or personal data.

Wasabi now funds a blockchain analysis company to spy on utxo's before they are allowed to participate in their Coinjoin or not, but they advertise themselves as the ultimate privacy solution, Binance says funds are safu when they can be hacked at anytime, so yeah, it is just PR and it is left for people to do their research about whatsoever service they are using.

Die_empty

hero member

Activity: 686

Merit: 987

Give all before death

Quote from: BitcoinGirl.Club on September 25, 2023, 01:08:33 AM

That's a bad news for the business. I saw them on the forum and if I am not wrong then they have an active campaign too. As far as I can remember they hold only one key, so how it's possible to lose the assets if other keys are not exposed? The hacker defiantly got the data of all these users.

They have a running campaign and conducted one of the highest review campaigns in the forum. The Mixin review employed 100 members and paid the highest amount and members were even paid upfront. They have suspended both deposits and withdrawals which means customers will wait to get more information from the management.

Quote from: Beerwizzard on September 25, 2023, 02:28:53 AM

The irony is that the big bold headline in the middle of Mixin website says "Secure Digital Assets and Messages on Mixin" and apparently it turned out that the platform itself is actually not secure.
It feels like everyone who is advertising his service with the accent on security or privacy is actually trying to fuck you up.

It is better to take the risk of keeping your investment than to surrender it to a centralized firm. All those privacy adverts are just marketing strategies to attract customers. I have used their services, and although it was a little bit confusing everything worked perfectly. It is always important not to keep large funds in these custodian websites regardless of how trustworthy they look.

Beerwizzard

full member

Activity: 924

Merit: 148

The irony is that the big bold headline in the middle of Mixin website says "Secure Digital Assets and Messages on Mixin" and apparently it turned out that the platform itself is actually not secure.
It feels like everyone who is advertising his service with the accent on security or privacy is actually trying to fuck you up.

Z-tight

legendary

Activity: 994

Merit: 1089

Quote from: BitcoinGirl.Club on September 25, 2023, 01:08:33 AM

I saw them on the forum and if I am not wrong then they have an active campaign too.

Yeah, there is an active signature campaign for mixin safe.

Quote from: BitcoinGirl.Club on September 25, 2023, 01:08:33 AM

As far as I can remember they hold only one key, so how it's possible to lose the assets if other keys are not exposed? The hacker defiantly got the data of all these users.

With how mixin safe operates, it is possible to mistake them for a multisig wallet, but they are not. When making a tx on mixin safe you'll need both the owner key and member's key, and they can also help you recover your wallet, but mixin safe is a custodial service with a centralized database and you lose control of your funds once you deposit it in a safe.

Quote from: BABY SHOES on September 25, 2023, 01:21:16 AM

Some blame it on the fact that they rely on a cloud that is vulnerable to hacking, so all their customers' assets are stored as a third party?

Blame it on the fact that they have a single point of failure, and it has been exploited here, take note that mixin safe is a custodial service, so they control customers' funds.

BABY SHOES

sr. member

Activity: 294

Merit: 433

HODL - BTC

Quote from: BitcoinGirl.Club on September 25, 2023, 01:08:33 AM

That's a bad news for the business. I saw them on the forum and if I am not wrong then they have an active campaign too. As far as I can remember they hold only one key, so how it's possible to lose the assets if other keys are not exposed? The hacker defiantly got the data of all these users.

I noticed that some were wearing Mixin Network signatures.
Where in their official thread there has not been any announcement including the Mixin Network representative has been inactive for the past few days.
Their thread: https://bitcointalk.org/index.php?topic=5459401.60

I don't know how their system works, is it just one key? Or is it a platform that controls it?

According to the article the mixin network is worth $1.1 billion.
With the official report: https://mixin.network/blog/2023/mixin-network-monthly-report-no.53/

Some blame it on the fact that they rely on a cloud that is vulnerable to hacking, so all their customers' assets are stored as a third party?

PX-Z

hero member

Activity: 1554

Merit: 880

Notify wallet transaction @txnNotifierBot

This is very unfortunate, i just found out this news earlier via mixin messenger. With that figures, i assumed that's if not most, that's all of their holdings.
I remember reviewing their service, the mixin safe. Good thing it wasn't up yet, although it was run with multisig i don't know if it will be affected if it's already up by this moment.

BitcoinGirl.Club

legendary

Activity: 2800

Merit: 2736

Farewell LEO: o_e_l_e_o

Quote from: BABY SHOES on September 25, 2023, 01:01:19 AM

Today's breaking news - that Mixin Network's cloud database has been attacked resulting in the loss of several mainnet assets and that's what the official statement on Twitter says.
[1] https://twitter.com/MixinKernel/status/1706139175018529139

It is said that the incident occurred on September 23, 2023 and only today the founder of Mixin Network held a press conference at the media in Hong Kong time to reveal this problem occurred.

SlowMist as the blockchain security advisor will continue to own this case and they will provide updates.
[2] https://twitter.com/SlowMist_Team/status/1706133260869468503

Other sources
https://watcher.guru/news/hong-kongs-mixin-network-hack-leads-to-200-million-loss
https://www.coindesk.com/tech/2023/09/25/mixin-network-losses-nearly-200m-in-hack/

That's a bad news for the business. I saw them on the forum and if I am not wrong then they have an active campaign too. As far as I can remember they hold only one key, so how it's possible to lose the assets if other keys are not exposed? The hacker defiantly got the data of all these users.

BABY SHOES

sr. member

Activity: 294

Merit: 433

HODL - BTC

Today's breaking news - that Mixin Network's cloud database has been attacked resulting in the loss of several mainnet assets and that's what the official statement on Twitter says.
[1] https://twitter.com/MixinKernel/status/1706139175018529139

It is said that the incident occurred on September 23, 2023 and only today the founder of Mixin Network held a press conference at the media in Hong Kong time to reveal this problem occurred.

SlowMist as the blockchain security advisor will continue to own this case and they will provide updates.
[2] https://twitter.com/SlowMist_Team/status/1706133260869468503

Quote

Deposit and withdrawal services on Mixin Network have been temporarily suspended.

Other sources
https://watcher.guru/news/hong-kongs-mixin-network-hack-leads-to-200-million-loss
https://www.coindesk.com/tech/2023/09/25/mixin-network-losses-nearly-200m-in-hack/

Topic: Mixin Network hacked - $200 Million lost - page 2. (Read 461 times)