Trust Wallet will cover $7M lost in Christmas Day hack, CZ says

Trust Wallet will cover $7M lost in Christmas Day hack, CZ says

Trust Wallet users lost about $7 million in a Christmas Day exploit that had been planned since early December.

Trust Wallet’s browser extension version 2.68 was compromised by a security incident impacting desktop users, Trust Wallet said in a Thursday X post; it advised users to upgrade to version 2.89.

Changpeng Zhao, co-founder of Binance, which owns the cryptocurrency wallet that claims to serve 220 million users, said in a Friday X post that the lost funds will be covered.

Cryptocurrency wallet exploits have been an increasing threat to digital asset investors.  Personal wallet compromises accounted for 37% of the value stolen in 2025, if the $1.4 billion Bybit hack in February is excluded, according to Chainalysis.

Still, the $7 million Trust Wallet exploit pales in comparison to some of the biggest wallet hacks. In February 2024, the co-founder of play-to-earn game Axie Infinity, Jeff Zirlin, lost $9.7 million worth of Ether to a suspected wallet exploit.

Crypto industry watchers raise insider concerns following Trust Wallet exploit

The orchestrators of the attack on Trust Wallet had been preparing the exploit as early as Dec. 8, wrote Yu Xian, co-founder of blockchain security firm SlowMist, in a Friday X post. A machine translation of his post read:

“The attacker started preparations at least on [Dec. 8], successfully implanted the backdoor on [Dec. 22], began transferring funds on [Christmas Day], and thus was discovered.”

The backdoor code was also collecting users’ personal information, which was sent to the attacker’s server.

According to onchain detective ZachXBT, “hundreds” of Trust Wallet users were affected.

Some industry watchers pointed to signs of potential insider activity from the exploit, as the attacker was able to submit a new version of the Trust Wallet extension on the website.

“This kind of ‘hack’ is not natural. The chances of insider is high,” intergovernmental blockchain adviser Anndy Lian wrote in a Friday X post.

Zhao agreed that the exploit was “most likely” an insider.

SlowMist’s Xian also noted that the attacker was “very familiar with the Trust Wallet extension’s source code,” which enabled them to implement the backdoor code necessary to collect sensitive user information.

 

Source: https://cointelegraph.com/news/trust-wallet-cover-7m-hack-zhao

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j

Bybit Dihantam Peretasan Besar: ETH Berpindah Masif, Investor Beralih ke Best Wallet?

Bybit Dihantam Peretasan Besar: ETH Berpindah Masif, Investor Beralih ke Best Wallet?

Dunia crypto kembali diguncang oleh peretasan skala besar yang menimpa Bybit. Dalam serangan ini, hacker berhasil mencuri aset senilai $1,4 miliar, menciptakan kepanikan di kalangan pengguna dan investor. Insiden ini menyebabkan arus transaksi dalam jumlah besar, dengan BTC, ETH, XRP, dan USDT mengalir ke platform tersebut.

Sebagian pihak melihat masuknya dana ini sebagai bentuk dukungan dari komunitas crypto. Namun, fakta bahwa peretas kini memiliki lebih dari 500.000 ETH menimbulkan kekhawatiran besar.

Jumlah ini bahkan melebihi kepemilikan salah satu pendiri Ethereum, Vitalik Buterin, yang hanya memiliki sekitar 240.000 ETH. Saat ini, dana hasil peretasan tersebar di 53 dompet berbeda dan terus dipantau oleh tim keamanan blockchain.

Dengan jumlah ETH yang sangat besar, menjual aset ini tanpa terdeteksi bukanlah hal mudah. Di tengah kekhawatiran, CEO Bybit, Ben Zhou, memastikan bahwa tidak ada dana pelanggan yang hilang. Ia juga menegaskan bahwa kondisi keuangan perusahaan tetap stabil.

“Bybit tetap solvent meskipun kerugian akibat peretasan ini tidak bisa dipulihkan. Semua aset klien tetap 1:1 dan kami dapat menanggung kerugian ini.” – Ben Zhou, CEO Bybit.

Meskipun serangan ini tergolong besar, Bybit mampu memproses lebih dari 350.000 permintaan penarikan dana dalam waktu singkat.

Binance Tidak Terlibat dalam Aliran Dana ke Bybit

Spekulasi bermunculan bahwa Binance mungkin membantu Bybit dengan mentransfer Ethereum ke platform tersebut untuk menstabilkan cadangan dana mereka. Namun, CEO Binance, Changpeng Zhao (CZ), membantah keterlibatan perusahaannya.

Dalam sebuah unggahan di media sosial, CZ menyatakan bahwa transaksi yang mengarah ke Bybit kemungkinan besar berasal dari pengguna biasa atau whale yang memberikan pinjaman ke platform tersebut.

“Itu hanya transaksi pengguna, saya rasa. Mungkin ada whale yang meminjamkan dana ke Bybit. Saya tidak ada hubungannya dengan ini.” – Changpeng Zhao, CEO Binance.

Sementara itu, analis crypto Anndy Lian menyarankan komunitas untuk menarik aset mereka dari Bybit, bukan karena kehilangan kepercayaan, tetapi sebagai langkah pencegahan terhadap potensi risiko di masa depan.

Whale Crypto Mulai Bergerak: Transfer ETH dan BTC dalam Jumlah Besar

Data on-chain dari Lookonchain mengungkapkan bahwa salah satu whale menarik 11.800 ETH (senilai $31 juta) dari Binance dan menyimpannya di cold wallet Bybit. Beberapa saat kemudian, 36.000 ETH tambahan (senilai $96,5 juta) dikirim dari hot wallet Binance ke Bybit.

“Sebanyak 36.000 ETH ($96,5 juta) baru saja dipindahkan dari hot wallet Binance ke cold wallet Bybit dalam waktu 15 menit terakhir.” – Lookonchain.

Transaksi besar lainnya juga dilaporkan oleh Whale Alert, termasuk transfer hampir 3.000 BTC (senilai $285 juta) dan 39.998 ETH (senilai $105,5 juta) ke Bybit.

Selain itu, Bitget turut memberikan dukungan besar, sementara Jun Du, Co-Founder HTX, berjanji untuk menyetor 10.000 ETH ke Bybit dan tidak akan menariknya hingga bulan depan.

Panic Selling: Pengguna Berbondong-bondong Tarik Dana dari Bybit

Meskipun ada aliran dana masuk yang besar, pengguna tetap memilih menarik aset mereka dari Bybit karena kekhawatiran akan keamanan platform.

Data dari Arkham Intelligence menunjukkan bahwa Galaxy Digital, melalui meja perdagangan OTC-nya, menarik 25.000 ETH ($67 juta) dan 200.000 USDC hanya dalam beberapa jam. Selain itu, dompet anonim lainnya menarik 700 BTC ($68,8 juta).

Bybit Tetap Bertahan di Tengah Gempuran Penarikan Dana

Walaupun mengalami peretasan besar dan gelombang penarikan dana, Bybit masih memiliki cadangan aset yang cukup besar. Laporan terbaru menunjukkan bahwa platform ini masih menyimpan 450.462 ETH (senilai $1,2 miliar), bersama dengan BTC, USDT, USDC, dan MNT, yang jika digabungkan bernilai miliaran dolar.

Meskipun upaya stabilisasi sedang dilakukan, pasar terus mengamati bagaimana Bybit akan bangkit dari serangan terbesar yang pernah menimpanya.

Keamanan Crypto Semakin Rawan: Bagaimana Cara Melindungi Aset Digital?

Kasus peretasan Bybit bukanlah satu-satunya serangan besar dalam dunia crypto. Sepanjang 2024, serangan siber terhadap exchange dan wallet digital meningkat drastis, mengakibatkan kerugian hingga miliaran dolar.

Laporan terbaru menunjukkan bahwa lebih dari 50% kasus pencurian crypto dilakukan oleh kelompok hacker internasional, terutama dari Korea Utara. Bahkan, data dari Katadata mengungkapkan bahwa total crypto yang dicuri sepanjang tahun lalu mencapai $2,2 miliar, naik lebih dari dua kali lipat dibandingkan tahun sebelumnya.

Kejadian ini semakin memperkuat pentingnya mencari metode penyimpanan yang lebih aman dibandingkan menyimpan aset di centralized exchange (CEX). Meskipun platform besar seperti Bybit dan Binance memiliki sistem keamanan yang canggih, peretasan tetap bisa terjadi.

Tren penggunaan crypto wallet non-custodial semakin meningkat. Wallet ini memungkinkan pengguna memegang kendali penuh atas private key, sehingga aset tetap aman meskipun exchange mengalami peretasan.

 

 

Source: https://cryptonews.com/id/news/bybit-hack-update-massive-eth-transfers-user-withdrawals-explained/

 

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j

How to Secure Your Crypto Wallet in 2024: 5 Expert Tips

How to Secure Your Crypto Wallet in 2024: 5 Expert Tips

In 2023, the value of stolen and hacked cryptocurrencies significantly decreased when compared to data from past years, a report by Chainalysis concluded.

Illicit revenue for crypto scamming fell by 29.2% and by 54.3% for hacking, aided by a sharp dropoff in decentralized finance (DeFi) hacking, which could signify that DeFi systems are improving their security practices.

However, cryptocurrency holders must also remain vigilant and proactive in securing their assets.

Here are some of the best ways how to protect your crypto wallet in 2024.

Key Takeaways

  • In 2023, crypto scamming fell by around 30% and crypto hacking by more than 50%. However, due to evolving scams and hacking techniques, individual users’ wallets are still at risk.
  • Choosing cold/hardware wallets offers users higher security measures through the offline storage of private keys, though they may be less user-friendly.
  • Keeping wallet software updated is vital for security.
  • Users should scrutinize transactions for potential scams like approval phishing.
  • Double-checking destination addresses, handling links cautiously, and verifying website domains can mitigate the risk of falling victim to scams.
  • Emerging trends like advanced encryption, biometric authentication, and smart contract integration are shaping the future of wallet security.

How to Secure Your Crypto Wallet: Experts Define 5 Crucial Steps

Despite an overall decline in cryptocurrency criminal activities, the ever-evolving nature of scams and hacking techniques means that the cryptocurrency wallets of individual users may still be at risk.

Adopting strong security measures, staying informed about the latest trends, and continuously monitoring wallets for any suspicious activity are some of the most crucial steps that digital asset holders must take to secure their cryptocurrency.

1. Choose a Cryptocurrency Wallet Wisely

Selecting the right cryptocurrency wallet is one of the most crucial steps to keep owned digital assets safe, Jeff Owens, the CEO and co-founder of Haven1, a Layer 1 blockchain engineered to address Web3 security and liquidity challenges, told Techopedia.

According to Owens, a cold/hardware wallet, similar to Ledger, is one of the most secure options users can opt for due to its feature of storing private keys offline. Additionally, such wallet types feature PIN protection and recovery seed phrases but could be a little more challenging for beginner investors to navigate.

However, other experts note that each wallet type tends to balance convenience and security differently, allowing users to choose the best wallet for them based on their security needs and abilities.

Anndy Lian, an inter-governmental blockchain expert, explained:

“Hardware wallets are generally considered more secure but less convenient, while software wallets offer ease of use but are more vulnerable to online threats. Paper wallets, while not susceptible to cyber-attacks, carry the risk of being physically damaged or lost.”

Lian added that users holding large sums of cryptocurrencies could consider cold storage wallets as they are not connected to the internet and are less susceptible to hacking.

2. Pay Extra Attention to Your Passwords and Private Keys

Experts note that setting up a strong password is perhaps the first step in securing users’ cryptocurrency wallets.

According to Haven1’s Owens, some of the biggest mistakes crypto holders make when securing their wallets are weak passwords and the lack of two-factor authentication (2FA).

Additionally, users must also pay extra attention to where they store their private keys.

According to Alvin Kan, the COO of Bitget Wallet, keeping private keys offline as much as possible through hardware or paper wallets prevents hackers from gaining access to them via the internet.

Kan added:

“Pay attention to password security by creating complex and unique passwords, avoiding easily guessed combinations (e.g., birthdays, sequential numbers). Regularly change your passwords and avoid using the same password across multiple platforms. Consider enabling two-factor authentication (2FA) for an added layer of security.”

3. Store Passwords Offline

The more information users store online, the easier it is for hackers to get ahold of it, which is why going back to the old-fashioned pen-and-paper days could keep digital assets held in cryptocurrency wallets safe.

Haven1’s Ownes noted:

“In general, the more information you keep offline, the more secure it will be. If you don’t like the idea of paper, encrypted digital backup held on a physical device, like a USB, is also an option.”

Bitget Wallet’s Kan added that the backup process for hardware wallets often includes managing a recovery seed phase. For heightened security measures, it is recommended that users write the recovery seed phrase on paper and store it offline.

4. Regularly Update Software

Failing to update the firmware of hardware wallets is another issue that may leave certain users more susceptible to hacking attacks.

Updates often include bug fixes and stricter security measures, making them an integral part of securing your cryptocurrency wallet.

5. Be Wary of All Transactions

According to Chainalysis’ report, while scam revenue in 2023 was down, approval phishing scams became more prominent last year. In approval phishing, scammers trick users into signing a malicious blockchain transaction that gives the scammer access to the victim’s wallet.

The report highlighted that in 2023, approval phishing scammers stole $374.6 million from cryptocurrency wallets.

Value in $ stolen through approval phishing scams May 2021 – November 2023. Source: Chainalysis 

Haven1’s Ownes noted that it is important for users to double the destinations of transactions several times before approval.

“For example, even if the first and last digits of an address look right, it could be subject to a mirroring (or “address poisoning”) scam, where scammers trick users into sending funds to a fake address that closely resembles the real one. Last month, a crypto user lost $69 million worth of wrapped Bitcoin to such a scam.”

Additionally, Bitget Wallet’s Kan said users should handle links and file downloads with extra caution and always double-check website domains to avoid phishing sites disguised as official websites.

Future of Crypto Wallet Security

Advanced encryptionbiometric authentication, and smart contract integration are some of the first steps in emerging trends that aim to protect digital assets stored in wallets.

Lian noted that integrating biometric data for user authentication provides a more secure and personalized way for users to access their wallets. Meanwhile, using smart contracts to automate security protocols reduces the risk of human error, thus further boosting security measures.

Kan explained that Bitget Wallet is already implementing some new security measures, such as MPC and AA wallets that divide private keys into multiple parts or execute transactions automatically through smart contracts in order to offer users an extra degree of security.

He added that secure multiparty computation (SMPC) is another emerging trend that works to boost the security of cryptocurrency wallets by enabling multiple parties to jointly compute a function while keeping their own inputs private.

“Within the context of encrypted wallets, SMPC can facilitate secure distributed key generation and management functions without exposing individual keys to risks,” he explained.

The development of decentralized identity solutions (DID) also strives to make the authentication process more secure by letting users verify their identity without having to expose their personal information. Integrating DID into encrypted wallets can help prevent identity theft and fraud.

The Bottom Line

Despite a recent decline in crypto crimes, securing your cryptocurrency wallet remains crucial in ensuring your digital assets’ safety. New scams and hacking techniques continuously threaten individual users.

Key steps to enhance security include choosing the right wallet type, using strong passwords, enabling two-factor authentication, keeping private keys offline, and regularly updating software.

Additionally, as the industry evolves, new advancements in crypto wallet security offer more robust ways to safeguard investments, including the emergence of biometric authentication, secure multiparty computation (SMPC), and decentralized identity solutions.

 

Source: https://www.techopedia.com/how-to-secure-your-crypto-wallet

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j