Bitcoin

Optimism

Polygon

Indonesian crypto exchange Indodax suffered a loss of approximately $22 million in various cryptocurrencies and has since disabled its mobile and web applications to investigate the breach.
On Sept. 11, multiple blockchain investigation firms — including PeckShield, Cyvers and SlowMist — alerted that there had been an attack on Indodax’s hot wallets. The hacker stole large amounts of Bitcoin (<a data-ct-non-breakable="null" href="https://cointelegraph.com/bitcoin-price" rel="null" target="null" text="null" title="null">BTC</a>), Tronix (<a data-ct-non-breakable="null" href="https://cointelegraph.com/tron-price-index" rel="null" target="null" text="null" title="null">TRX</a>), Ether (<a data-ct-non-breakable="null" href="https://cointelegraph.com/ethereum-price" rel="null" target="null" text="null" title="null">ETH</a>), Polygon (<a data-ct-non-breakable="null" href="https://cointelegraph.com/polygon-price-index" rel="null" target="null" text="null" title="null">POL</a>) and Shiba Inu (<a data-ct-non-breakable="null" href="https://cointelegraph.com/shiba-inu-price-index" rel="" target="_self" text="null" title="https://cointelegraph.com/shiba-inu-price-index">SHIB</a>), among other tokens.
<figure>
 <img alt="Indonesian crypto exchange Indodax goes offline after suspected $22M hack" name="" src="https://s3.cointelegraph.com/uploads/2024-09/0191dff0-5ada-7de7-a7ad-5bd3c9ea47ff">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/SlowMist_Team/status/1833707952353812782" rel="null" target="null" text="null" title="https://x.com/SlowMist_Team/status/1833707952353812782">SlowMist</a>
 </figcaption>
</figure>
SlowMist’s independent investigation suggested a breach in Indodax’s withdrawal system allowed the hacker to withdraw funds from the exchange’s hot wallet. Cyvers, on the other hand, believed other systems were attacked, such as the signature machine.
The hacker stole over $1.42 million in Bitcoin, $2.4 million in Tron’s TRX, over $14.6 million in various ERC-20 tokens, $2.58 million in POL and $900,000 in ETH from the Optimism blockchain.
Cyvers <a data-ct-non-breakable="null" href="https://x.com/CyversAlerts/status/1833629057256239175" rel="nofollow noopener" target="_blank" text="null" title="https://x.com/CyversAlerts/status/1833629057256239175">detected</a> more than 150 suspicious transactions over multiple networks and reported that the hacker had started swapping the tokens to Ether. After converting their stolen funds to ETH, hackers typically use crypto mixing services such as Tornado Cash to siphon the loot anonymously.
<h2 id="indodax-shuts-all-operations-to-investigate-hack">Indodax shuts all operations to investigate hack</h2>
Shortly after the breach was revealed on social media, Indodax acknowledged the hack and informed users it would temporarily shut down its services. The company <a data-ct-non-breakable="null" href="https://x.com/indodax/status/1833681240735760633" rel="nofollow noopener" target="_blank" text="null" title="https://x.com/indodax/status/1833681240735760633">said</a> in a statement:
<blockquote>
 “Currently, we are conducting a complete maintenance to ensure the entire system is operating properly. During this maintenance process, the INDODAX web platform and application are temporarily inaccessible.”
</blockquote>
The crypto exchange reassured investors that their crypto assets were safe.
<figure>
 <img alt="Indonesian crypto exchange Indodax goes offline after suspected $22M hack" name="" src="https://s3.cointelegraph.com/uploads/2024-09/0191dff5-cb2f-7779-bb33-86871c8562bc">
 <figcaption style="text-align: center;">
 The Indodax website was made inaccessible to users amid the hack investigation. Source: Indodex
 </figcaption>
</figure>
Yosi Hammer, head of AI at Cyvers, suspects the involvement of North Korea’s infamous cryptocurrency hackers, the Lazarus Group. He told BSCN:
<blockquote>
 “The pattern and the characteristics of the (Indodax) attack highly resemble those of North Korea’s Lazarus Group.”
</blockquote>
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/lazarus-group-laundered-200m-crypto-since-2020" rel="null" target="null" text="null" title="null">Lazarus Group laundered over $200M in hacked crypto since 2020</a>
According to CoinMarketCap data, Indodax has a reserve balance of $369 million, part of which could be repurposed to recoup investors’ losses.
<figure>
 <img alt="Indonesian crypto exchange Indodax goes offline after suspected $22M hack" name="" src="https://s3.cointelegraph.com/uploads/2024-09/0191e008-1501-7993-8f92-fc5a35589262">
 <figcaption style="text-align: center;">
 Indodax’s financial reserves. Source: CoinMarketCap
 </figcaption>
</figure>
<h2 id="north-korean-hackers-increasingly-target-the-crypto-community">North Korean hackers increasingly target the crypto community</h2>
The largest hack in July, in which <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/wazirx-235m-hack-north-korean-hackers" rel="" target="_self" text="null" title="https://cointelegraph.com/news/wazirx-235m-hack-north-korean-hackers">crypto exchange WazirX lost $235 million</a>, was also attributed to North Korea’s Lazarus Group.
While Web3 security firm Cyvers initially flagged the attack, <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/wazirx-235m-hack-north-korean-hackers" rel="" target="_self" text="null" title="https://cointelegraph.com/news/wazirx-235m-hack-north-korean-hackers">blockchain forensics firm Elliptic told Cointelegraph</a> that specific patterns and techniques in the WazirX attack led it to believe North Korean hackers were behind the incident.
Cryptocurrency investigator ZachXBT also reached a similar conclusion.
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/parents-addicted-pi-network-crypto-tapper/" rel="null" target="null" text="null" title="null">Help! My parents are addicted to Pi Network crypto tapper</a>

Indonesian crypto exchange Indodax goes offline after suspected $22M hack

Table of Contents

Cointelegraph

Other articles published on Sep 11, 2024

Analyst Warns of Significant Bitcoin Selling Pressure

Dogecoin Leads Meme Coin Market with Unmatched Social Media Activity

Ethereum ‘Bullposter’ Faces Backlash, Buterin Shows Support

Charles Hoskinson Speaks Out About Cardano (ADA) FUD, Denies Allegations!

a16z Crypto Selects 21 Startups for Fall 2024 Accelerator Cohort

JUST IN: Coinbase Made a Mysterious Post – Is It Really Coming?

Join our free newsletter for daily crypto updates!