ETH
by BSC News
July 22, 2024
Initially offering $10,000 and later increasing the reward to $11.5 million, the exchange has now set the bounty at $23 million.
Indian cryptocurrency exchange WazirX has unveiled a significant bounty program, offering up to $23 million for the recovery of assets stolen in a recent cyberattack.
The total bounty has been updated to $23M thanks @zachxbt for the suggestion 🙏 https://t.co/qzaqwAuLod
— Nischal (Shardeum) 🔼 (@NischalShetty) July 21, 2024
The attack, which targeted one of the exchange’s multisig wallets, resulted in a substantial loss OF $234 million. Initially, WazirX offered a reward of $10,000 in USDT for actionable intelligence that could lead to freezing the stolen funds, along with a 5% reward on recovered amounts. However, this offer faced criticism for being too modest.
In response to feedback, WazirX increased the bounty significantly. The latest update offers up to $23 million for the successful recovery of the stolen assets. This reward is intended to incentivize white hat hackers and security experts to assist in tracing and recovering the stolen funds.
The program will run for three months, with the possibility of extension based on the progress and requirements of the recovery efforts.
The security breach occurred on July 18, leading to a significant outflow of funds from one of WazirX’s multisig wallets. The company confirmed the breach and temporarily halted all withdrawals to mitigate further losses. Co-founder Nischal Shetty clarified that the hack was not due to phishing but involved complex multi-signature processes.
Shetty explained that three WazirX team members, each using separate hardware wallets, signed the transactions. Despite their physical separation and secure bookmarks, the attack involved a final signature from Liminal, WazirX's custody provider.
Shetty emphasized that no hardware keys from the WazirX team were compromised and that Liminal’s signing process is under detailed investigation.
WazirX is collaborating with forensic experts to conduct a thorough audit of the compromised devices and the signing process. This investigation aims to determine whether any of the WazirX devices were compromised or if the attack exploited weaknesses in the Liminal system.
The forensic analysis will help clarify how the malicious payload was signed and provide insights into the attack’s execution. Shetty assured that the WazirX team is working tirelessly to resolve the issue and rebuild trust within the community.
Disclaimer
Disclaimer: The views expressed in this article do not necessarily represent the views of BSCNews. The information provided in this article is for educational and informational purposes only and should not be construed as investment advice. BSCNews assumes no responsibility for any investment decisions made based on the information provided in this article
Related News
Latest News
4h : 26m ago
Aptos Welcomes Brevan Howard, BlackRock, and Hamilton Tokenized Funds by Libre
7h : 26m ago
Magic Eden Launches New US Domain, Separates Services for US and International Users
9h : 11m ago
Pavel Durov Criticizes French Authorities Over Telegram Charges, Hints at Market Withdrawals
12h : 26m ago
Changpeng Zhao Permanently Barred from Binance Management But Retains Power: Binance CEO
September 5, 2024
What is SNAXchain by Synthetix?
September 5, 2024
Angel Drainer Resurfaces: New Phishing Toolkit AngelX Deploys 300+ Malicious dApps
September 5, 2024
Injective Launches World’s ‘First Ever’ Tokenized Index for BlackRock's BUIDL Fund
September 5, 2024
ApeCoin Launches BluePrint Initiative to Enhance ApeChain with New Tools and Content
More News