Poloniex hacked, $100M+ stolen | Bitcointalksearch.org

Rikafip

legendary

Activity: 1722

Merit: 5937

Quote from: bbc.reporter on November 12, 2023, 08:48:53 PM

Do they have internet in North Korea?

Of course they do, but its only available for a selected few.

Quote from: Lucius on November 13, 2023, 10:34:37 AM

Something definitely stinks in all this, and I would say that some suspicious games are involved, and I wouldn't be surprised if it were some money laundering schemes.

The same thought crossed my mind as well, but then again there must be an easier way to launder money other than faking hacks so I am inclined to believe that in thend end its all just a matter of incompetence.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: Rikafip on November 10, 2023, 04:59:36 PM

~snip~
Yep. According to him, hackers gave back money stolen from HTX but since there is no way to prove and he is known bullshitter, I tend not to believe him. Who the hells what is going over there.

Something definitely stinks in all this, and I would say that some suspicious games are involved, and I wouldn't be surprised if it were some money laundering schemes. Fortunately for all of us, news like this no longer has the same impact on the market as it did in the past.

Quote from: Rikafip on November 10, 2023, 04:59:36 PM

That just tells you how relevant Poloniex is at the moment. With that being said, I don't think that any exchanges getting hacked other than Coinbase and Binance would affect the market, and it would have to be a big amount of money stolen.

If we take into account that those CEXs you mention supposedly keep 98% of all funds in cold wallets (at least that's what they claimed from Coinbase), then theoretically their hacking shouldn't shake the market too much. Of course, the catch is that most of those who keep their coins on those CEXs have no idea what is a hot and what is a cold wallet - and if they heard about a hack, they would panic as if the world had come to an end.

crwth

copper member

Activity: 2940

Merit: 1280

https://linktr.ee/crwthopia

A lot of rumors for sure will start to circulate about what they are trying to do behind the exchange. There could be something that is happening that could be malicious and should be investigated. The corrupt stuff that is happening would really be a great deal to give time on to prevent other exchanges from doing it.

bbc.reporter

legendary

Activity: 3122

Merit: 1492

Quote from: Potato Chips on November 10, 2023, 09:53:10 AM

I was checking other sources and found an interesting bit in coindesk,see: https://www.coindesk.com/business/2023/11/10/poloniex-hot-wallets-hacked-65m-seemingly-stolen-on-chain-data/

So apparently, hackers bought $20M worth of TRX which bumped the price. But if it's for pump and dump scheme, why TRX of all altcoins? shouldn't there be easier coins?

However in another source, hackers appeared to have sent away $2.5 million lol

Quote from: https://decrypt.co/205465/justin-sun-owned-crypto-exchange-poloniex-hacked-60m

In one instance, however, the hacker appears to have fat-fingered at least one transaction, sending $2.5 million in stolen Golem tokens (GLM) to the token contract rather than the secondary addresses in their control. It will be impossible for them to recover this sum.

I'm not sure if we're being played or they're just dum dums.

We can be quite certain that in much of these hacks, we are being tricked by the development teams, the government and the hustlers of the cryptospace. It is very much similar with these declared DeFi hacks. They were only the development teams that wanted to steal the treasury hehehe.

On Justin Sun, it would not be very shocking if he wanted the whole cryptospace to dump while TRX pumps heeehehehe.

Also, this Poloniex hack might be blamed on the Lazarus group again hehe. How do we know that the Lazarus group is from North Korea? Do they have internet in North Korea?

Darker45

legendary

Activity: 2576

Merit: 1860

Quote from: tabas on November 12, 2023, 06:54:22 PM

Quote from: Darker45 on November 11, 2023, 09:04:47 PM

Quote from: tabas on November 11, 2023, 02:39:39 AM

Quote from: Darker45 on November 10, 2023, 10:25:36 PM

~snip~

What do you mean this is effective for publicity? Poloniex is dying. A hack which costs it more than a hundred million dollars might be the final nail in the coffin. It's mind-boggling to call this well-planned and that Justin is prepared for this.

Good or bad publicity, it's still publicity. And with what Justin Sun seems to be an expert on this one, and that's why I think that it's still effective on that way. I'm not saying that it's effective because it's going to make Poloniex alive more. But the hype that Justin creates from doing these publicity stunts is always effective on his end because it's always became the talk of the crypto town everytime he publish something through his own socmed accounts.

LOL! I'm not sure if this applies in this case. But, for sure, that saying isn't absolute. The one thing that's very vital in the business of crypto exchange is security, funds security to be exact. They're custodians, after all. Users are entrusting them their money. I don't know about you but, for me, whether your platform is rumored to be involved in wash trading, whether your platform is notorious in listing shitcoins, whether it has higher fees than its competitors, and so on don't matter much for as long as my money is secure.

If the talk in the crypto town is that Poloniex doesn't have good security, and there's proof because hackers were able to get into their system and steal funds, how is that better than not being talked about?

tabas

hero member

Activity: 3024

Merit: 745

🌀 Cosmic Casino

Quote from: Darker45 on November 11, 2023, 09:04:47 PM

Quote from: tabas on November 11, 2023, 02:39:39 AM

Quote from: Darker45 on November 10, 2023, 10:25:36 PM

He seems to have been well prepared for this that he's just recycling his old script. Having your platforms hacked one after another has certain advantages; you just have to Ctrl+C and then Ctrl+V, rephrase a little, and, voilà, there's your familiar statement.

It seems effective if this is just for another publicity that he's doing and yeah, looks well planned and prepared for it. But for the concern of the users there, hoping everything is fine and before anything crazier happens, they should just remove their funds there and withdraw asap.

What do you mean this is effective for publicity? Poloniex is dying. A hack which costs it more than a hundred million dollars might be the final nail in the coffin. It's mind-boggling to call this well-planned and that Justin is prepared for this.

Good or bad publicity, it's still publicity. And with what Justin Sun seems to be an expert on this one, and that's why I think that it's still effective on that way. I'm not saying that it's effective because it's going to make Poloniex alive more. But the hype that Justin creates from doing these publicity stunts is always effective on his end because it's always became the talk of the crypto town everytime he publish something through his own socmed accounts.

Quote from: Darker45 on November 11, 2023, 09:04:47 PM

Even given that Justin is that eccentric clown, I don't know how this could be used in his favor.

A publicity hungry clown would always see this on his favor. He'll ride situations even at the worst just to satisfy his hunger with that. Just as you have said, a recycled old script and that's his style.

PX-Z

hero member

Activity: 1554

Merit: 880

Notify wallet transaction @txnNotifierBot

Quote from: alani123 on November 11, 2023, 03:42:47 PM

Quote from: Apocollapse on November 10, 2023, 08:49:16 AM

Wild guess: is there a breach about personal identity too? Roll Eyes

I think that the way exchanges handle these information is that they do store your Name and address from your KYC verification, but that's normally held in different storage and also exchanges don't keep scan copies of passports/face images etc. Those are supposedly only checked only once by a KYC verification partner and then discarded. At least that's what they usually claim.

That's what i imagine why those third party KYC verification services exists, and what others custodial wallets claims for their kyc structure design. We could hope it's the case for this exchange.

As for the incident, the bitcoin price doesn't make a budge much, maybe a dime, but not that much.

Darker45

legendary

Activity: 2576

Merit: 1860

Quote from: tabas on November 11, 2023, 02:39:39 AM

Quote from: Darker45 on November 10, 2023, 10:25:36 PM

He seems to have been well prepared for this that he's just recycling his old script. Having your platforms hacked one after another has certain advantages; you just have to Ctrl+C and then Ctrl+V, rephrase a little, and, voilà, there's your familiar statement.

It seems effective if this is just for another publicity that he's doing and yeah, looks well planned and prepared for it. But for the concern of the users there, hoping everything is fine and before anything crazier happens, they should just remove their funds there and withdraw asap.

What do you mean this is effective for publicity? Poloniex is dying. A hack which costs it more than a hundred million dollars might be the final nail in the coffin. It's mind-boggling to call this well-planned and that Justin is prepared for this. Even given that Justin is that eccentric clown, I don't know how this could be used in his favor.

Quote from: alani123 on November 11, 2023, 03:42:47 PM

Quote from: Apocollapse on November 10, 2023, 08:49:16 AM

Wild guess: is there a breach about personal identity too? Roll Eyes

I think that the way exchanges handle these information is that they do store your Name and address from your KYC verification, but that's normally held in different storage and also exchanges don't keep scan copies of passports/face images etc. Those are supposedly only checked only once by a KYC verification partner and then discarded. At least that's what they usually claim.

Whatever they claim should be taken with a grain of salt. If only we can fully know how irresponsible these platforms are, all their claims could be discarded right away.

alani123

legendary

Activity: 2422

Merit: 1451

Leading Crypto Sports Betting & Casino Platform

Quote from: Apocollapse on November 10, 2023, 08:49:16 AM

Wild guess: is there a breach about personal identity too? Roll Eyes

I think that the way exchanges handle these information is that they do store your Name and address from your KYC verification, but that's normally held in different storage and also exchanges don't keep scan copies of passports/face images etc. Those are supposedly only checked only once by a KYC verification partner and then discarded. At least that's what they usually claim.

But still, to get a full picture of what was done poloniex would have to do some incident report. Otherwise it makes no sense to speculate. They should be responsible with their users and end the speculation by admitting to their faults. As it would also help other exchanges protect user funds better.

noorman0

hero member

Activity: 1778

Merit: 709

[Nope]No hype delivers more than hope

Quote from: Apocollapse on November 10, 2023, 08:49:16 AM

-snip-
Wild guess: is there a breach about personal identity too? Roll Eyes

The user identities and private key are placed in different storage and I think are handled by different security departments, so it seems unlikely that hackers would target both in one attack.

Quote from: dimonstration on November 10, 2023, 09:57:08 AM

-snip-
I believe the hacker might take this offer since it’s a clean money already without any trouble for potential criminal case when caught. All the crypto stolen can be easily tracked through chain analysis.

Actually, that's a dilemma choice, hackers will still be careful about doing it. The slightest carelessness that leaves traces can make him regret taking this offer.

tabas

hero member

Activity: 3024

Merit: 745

🌀 Cosmic Casino

This is one of the OG exchanges out there that have been one of the most popular when I was still new.

Quote from: Darker45 on November 10, 2023, 10:25:36 PM

Justin Sun seems to be gifted; he's got the opposite of the Midas touch. LOL! And he also gets to remain nonchalant despite another debacle, this time happening in his other platform. It must also be another gift.

Yeah, it's always like he's into these deep holes that's making him more noisier again. Before it was with these tron's partnerships everywhere. Now, he's into these hacking incidents but this is more costly to him if it's for real.

Quote from: Darker45 on November 10, 2023, 10:25:36 PM

He seems to have been well prepared for this that he's just recycling his old script. Having your platforms hacked one after another has certain advantages; you just have to Ctrl+C and then Ctrl+V, rephrase a little, and, voilà, there's your familiar statement.

It seems effective if this is just for another publicity that he's doing and yeah, looks well planned and prepared for it. But for the concern of the users there, hoping everything is fine and before anything crazier happens, they should just remove their funds there and withdraw asap.

Darker45

legendary

Activity: 2576

Merit: 1860

Justin Sun seems to be gifted; he's got the opposite of the Midas touch. LOL! And he also gets to remain nonchalant despite another debacle, this time happening in his other platform. It must also be another gift.

He seems to have been well prepared for this that he's just recycling his old script. Having your platforms hacked one after another has certain advantages; you just have to Ctrl+C and then Ctrl+V, rephrase a little, and, voilà, there's your familiar statement.

Anyway, for the nth time, everybody's reminded of the dangers of centralized exchanges.

Rikafip

legendary

Activity: 1722

Merit: 5937

Quote from: dimonstration on November 10, 2023, 09:57:08 AM

Surprisingly, The market is not heavily affected anymore on this kind of hack especially now that we on a bullish momentum. Typically, this kind of news is already being use to FUD the market yet crypto market is behaving as usual without any trace of FUD.

That just tells you how relevant Poloniex is at the moment. With that being said, I don't think that any exchanges getting hacked other than Coinbase and Binance would affect the market, and it would have to be a big amount of money stolen.

Quote from: Yamane_Keto on November 10, 2023, 12:16:34 PM

If I am not mistaken, this is the second platform linked to Justin Sun to be hacked in less than 90 days, and again he is offering a 5% white hat bounty agreement if they return the stolen funds within the next seven days.

Yep. According to him, hackers gave back money stolen from HTX but since there is no way to prove and he is known bullshitter, I tend not to believe him. Who the hells what is going over there.

Yamane_Keto

hero member

Activity: 630

Merit: 510

If I am not mistaken, this is the second platform linked to Justin Sun to be hacked in less than 90 days, and again he is offering a 5% white hat bounty agreement if they return the stolen funds within the next seven days.

If the hackers returned it, could this be a way to evade taxes or indicate a problem? It is difficult to think that it is something random. Let's see what happens in the coming months.

https://mobile.twitter.com/justinsuntron/status/1722951876986204259?

Fivestar4everMVP

legendary

Activity: 2422

Merit: 1083

Leading Crypto Sports Betting & Casino Platform

Quote from: dimonstration on November 10, 2023, 09:57:08 AM

Surprisingly, The market is not heavily affected anymore on this kind of hack especially now that we on a bullish momentum. Typically, this kind of news is already being use to FUD the market yet crypto market is behaving as usual without any trace of FUD.

Aside the fact that we are in a bullish period, I personally does not expect this hack to have any negative effect on the market, since the exchange involved in the hack isn't so much of a great one, gone are the days when poloniex had such influence, let say for example, that we are still in 2015 or 2016 right now when poloniex was the world's largest crypto exchange, then rest assured that the entire crypto market will be going through a bloodbath at the moment, and also know that the amount of money involved in this hack would have been much greater as well.

But today, only crypto OGs and very few newbies know that an exchange named poloniex exist, so there is no way this will affect the overall market sentiment at the moment, let's say that it was one of the exchanges in the top 5 ranking according to coinmarketcap that was involved in this hack, then the market would have possibly experienced some reasonable decline before it turns back bullish again after a few days.

dimonstration

hero member

Activity: 2758

Merit: 705

Dimon69

Surprisingly, The market is not heavily affected anymore on this kind of hack especially now that we on a bullish momentum. Typically, this kind of news is already being use to FUD the market yet crypto market is behaving as usual without any trace of FUD.

Quote from: OmegaStarScream on November 10, 2023, 07:28:50 AM

The latest articles are now saying it's +100M $[1] and Justin is now offering a 5% bounty to the hacker[2]

I believe the hacker might take this offer since it’s a clean money already without any trouble for potential criminal case when caught. All the crypto stolen can be easily tracked through chain analysis.

Potato Chips

hero member

Activity: 2786

Merit: 902

yesssir! 🫡

I was checking other sources and found an interesting bit in coindesk,see: https://www.coindesk.com/business/2023/11/10/poloniex-hot-wallets-hacked-65m-seemingly-stolen-on-chain-data/

So apparently, hackers bought $20M worth of TRX which bumped the price. But if it's for pump and dump scheme, why TRX of all altcoins? shouldn't there be easier coins?

However in another source, hackers appeared to have sent away $2.5 million lol

Quote from: OmegaStarScream on November 10, 2023, 07:28:50 AM

A bit off-topic but am I the only one who remembers very low trading volumes (even after shutting down and relaunching)? According to CoinGecko, the exchange now has ~500M/24h. I find that very hard to believe for an exchange that you barely see any mention of anymore.

and on May 31st, reported volume is only at 63M, see: https://web.archive.org/web/20230531012234/https://www.coingecko.com/en/exchanges/poloniex

but even this $63M may have been mixed with fake volume though I would guess the percentage of inflated volume is a lot less compared to now.

Rikafip

legendary

Activity: 1722

Merit: 5937

Quote from: OmegaStarScream on November 10, 2023, 07:28:50 AM

The latest articles are now saying it's +100M $[1]

Huh, amount stoleni ncreased quiet a bit. At the moment I shared the news number was $18.5M which I then edited to $50M and if I have to guess i would say that $100M is not the final amount.

Quote from: OmegaStarScream on November 10, 2023, 07:28:50 AM

and Justin is now offering a 5% bounty to the hacker

Iirc he did the same for that recent HTX hack and allegedly it worked.

Quote from: OmegaStarScream on November 10, 2023, 07:28:50 AM

A bit off-topic but am I the only one who remembers very low trading volumes (even after shutting down and relaunching)? According to CoinGecko, the exchange now has ~500M/24h. I find that very hard to believe for an exchange that you barely see any mention of anymore.

All exchanges bullshit about their trading volume to some degree so yeah, that number indeed seems unrealistically high.

Quote from: TheUltraElite on November 10, 2023, 07:41:09 AM

As usual, stop using exchanges as wallets.

As usual, those who do that won't change their habits, even if they have money on Poloniex and can't get it out at the moment.

Apocollapse

hero member

Activity: 1190

Merit: 803

They guess the hack because of private key compromise, but a year ago they stated if they maintain 95% of their funds in cold storage where it requires multi signature to access it. I think $100M isn't 5% of their total funds, they're not really big.

How can the hacker access the multi signature wallet? is the exchange hold few keys in a same place? Cheesy

that's kill the purpose of multi signature wallet.

Quote from: https://cointelegraph.com/news/poloniex-exchange-hack-60-million-drained-5-percent-bounty

According to blockchain security firm CertiK, the incident was likely a “private key compromise.”

Quote from: https://poloniex.com/blog/poloniex-is-committed-to-providing-a-secure-crypto-trading-platform

Cold storage: We always aim to maintain a 95% cold storage ratio. This means that most of your assets are sitting in cold storage with ultra-tight security in place (requires multisignature to access). We never keep assets outside of our hot and cold wallets.

Wild guess: is there a breach about personal identity too? Roll Eyes

TheUltraElite

legendary

Activity: 2898

Merit: 1253

So anyway, I applied as a merit source :)

Another nail in the statement of: do not store your coins on exchange and/or use an exchange as a wallet. Even though Polo has lost its charm among the new members with the influx of DEXs and other exchanges taking its place, I still remember Polo being the go-to exchange when I first attended this forum. It only shows that no exchange is ever safe from hacks or shutdowns and the user's money is always at risk. Even though they are promising to reimburse funds, a lot of paperwork ups and downs will happen to recover funds.

Fingers crossed to see how this situation develops.

As usual, stop using exchanges as wallets.

Topic: Poloniex hacked, $100M+ stolen (Read 300 times)