BingX Crypto Exchange Halts Withdrawals After Security Breach

Highlights:

• BingX crypto exchange has relayed plans to halt withdrawals as it rallies to curtail a security breach on its hot wallets.
• Affected users will receive due compensation as the exchange investigates the losses.
• PeckShieldAlert reported losses of over $40 million as users await the trading platform’s official report, relaying the compromise incurred losses.

Singapore-based crypto exchange BingX became the target of malicious actors in a cyber heist. Interestingly, the affected trading platform has confirmed the security breach. According to Vivien Lin, the Chief Product Officer at BingX, the compromise occurred in the early hours of today, affecting the exchange’s hot wallets.

Furthermore, the Chief Product Officer noted that the security breach only resulted in a minor asset loss, as the exchange implemented emergency security protocols to mitigate further compromise. These emergency plans included swift asset transfers and temporary withdrawal cessation.

Aside from halting withdrawals and the rapid assets transfer, Vivien revealed that the trading platform conduct an emergency inspection to strengthen security lapses. Before the unfortunate event, BingX is renowned for adopting a layered management system that ensures the safe storage of most assets in cold storage.

Meanwhile, only a minute percentage of users’ assets are in hot wallets for withdrawal purposes. Hence, this invariably implies that the bulk of assets under the exchange’s care are safe, as only hot wallets were tampered with.

At around 4am 20 Sep Singapore time, our technical team detected abnormal network access, suspecting a hacker attack on BingX's hot wallet. We immediately started our emergency plan, including the urgent transfer of assets and withdraw suspension. There has been minor asset loss,…

— Vivien Lin @ BingX (@Vivien_BingX) September 20, 2024

Victims Compensatory Plans and Withdrawals Re-Establishment

Having assured users that the exchange’s cyber security team would keep the situation under control, Vivien hinted at the possibility of a compensation package. According to her, the trading platform will deliberate on how best to approach the reimbursement. She added that BingX will announce the compensatory plans once investigations conclude.

Commenting on resuming withdrawals, the Chief Product Officer pleaded for users’ patience and apologized for the disruption. However, she noted that the withdrawals will resume within 24 hours.

Part of Vivien’s tweet read thus:

“BingX and the development team apologize for the disruption. Our mission to provide a seamless and trusted trading environment remains firm. We are working on a compensation plan, which we will announce soon. Thank you for your understanding and continued support.”

Blockchain Security Outlet Reports Over $40 Million in Losses for BingX

It is worth noting that BingX failed to disclose any specific amount accounting for the losses. The exchange stated, “There has been minor asset loss, but the amount is small and still being calculated.”

Contrary to BingX claims, renowned blockchain tracker outlet PeckShieldAlert reported the compromise with an estimated amount of lost crypto assets. Breaking the security breach news on its verified X handle, the security outlet noted that it resulted in losses of about $26.8 million for the exchange.

Noteworthily, PeckShieldAlert mentioned that significant fund outflows occurred via Ethereum (ETH) and Binance Coin (BNB). Meanwhile, the hacker has successfully swapped most stolen tokens for 4,526 Ethereum and 7,864.7 BNB.

In another recent tweet, the blockchain security firm reported that the malicious actor has not stopped carting away users’ funds. In the updated statistics, PeckShieldAlert spotlighted an extra $16.5 million fund diversion, bringing the total losses to about $43 million.

#PeckShieldAlert Another $16.5M worth of cryptos has been drained from #BingX by 0x940362B46faf7DF48Af1c8989d809F50466B5fCA about 7 hours ago.
The stolen funds are currently parked at 0x1Dd7dAf089C16856155FeFd7e2170966bb6b3AEE, totaling 5.3K $ETH, 4.1K $BNB & 1.65M $MATIC.
We…

— PeckShieldAlert (@PeckShieldAlert) September 20, 2024

With each passing day, scam tends to become the order of the day in crypto spaces. Yesterday, crypto2community reported a scam attempt involving malicious MANA airdrop links. For context, the scammers succeeded in hijacking Decentraland’s verified X handle, boasting about 607K followers to perpetuate their fraudulent acts. However, the Virtual reality platform recovered the account yesterday. Subsequently, it gave a rundown of the unfortunate incident, swift actions to recover the handle, and plans to prevent a recurrence.

🛡️Update: X Account Compromise

Yesterday, this account was compromised.

Thanks to the quick action of our team and community, the issue has been resolved. 🤝

Here's what happened and how we can prevent this in the future.

🚨 What happened (TLDR)?

On 09/18/2024, our official…

— Decentraland (@decentraland) September 19, 2024