Indonesian cryptocurrency exchange Indodax has temporarily suspended its operations following a significant breach that resulted in the loss of approximately $22 million.
Indonesian cryptocurrency exchange Indodax has temporarily suspended its operations following a significant breach that resulted in the loss of approximately $22 million in various digital assets.
The company has taken its mobile and web applications offline to investigate the incident.
On September 11, blockchain investigation firms PeckShield, Cyvers, and SlowMist raised alarms regarding an attack on Indodax’s hot wallets.
The breach reportedly allowed hackers to withdraw substantial amounts of Bitcoin, Ether, Tron, and several ERC-20 tokens. Cyvers identified over 150 suspicious transactions across multiple networks, indicating that the attacker had begun swapping stolen assets for Ether.
According to SlowMist's investigation, the breach originated from a vulnerability in Indodax's withdrawal system. In contrast, Cyvers suggested that other systems, including the signature machine, may have also been compromised.
The stolen assets included over $1.42 million in Bitcoin, $2.4 million in Tron tokens, $14.6 million in various ERC-20 tokens, $2.58 million in Polygon, and $900,000 in Ether from the Optimism blockchain.
Yosi Hammer, head of AI at Cyvers, speculated that the attack bore similarities to previous operations attributed to North Korea’s Lazarus Group.
This group has been implicated in several high-profile hacking incidents, including the $235 million theft from the WazirX exchange in July.
This article contains links to third-party websites or other content for information purposes only (“Third-Party Sites”). The Third-Party Sites are not under the control of CoinMarketCap, and CoinMarketCap is not responsible for the content of any Third-Party Site, including without limitation any link contained in a Third-Party Site, or any changes or updates to a Third-Party Site. CoinMarketCap is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement, approval or recommendation by CoinMarketCap of the site or any association with its operators.
This article is intended to be used and must be used for informational purposes only. It is important to do your own research and analysis before making any material decisions related to any of the products or services described. This article is not intended as, and shall not be construed as, financial advice.
The views and opinions expressed in this article are the author’s [company’s] own and do not necessarily reflect those of CoinMarketCap.
