Another hack attack occurred: Bitrue Singapore cryptocurrency exchange was attacked, resulting in a loss of XRP and Cardano (ADA) in the equivalent of $4.5 mln. The exchange announced the incident via its official Twitter account.
Before going into the details of hacking, the team talked about the current status and lost funds, and also tried to reassure users in its solvency:
“First of all, please let us assure you that this situation is under control, 100% of lost funds will be returned to users. [...] And we are reviewing our security measures and policies to ensure this does not happen again.”
At approximately 1am June 27 (GMT+8), a hacker exploited a vulnerability in our Risk Control team's 2nd review process to access the personal funds of about 90 Bitrue users.— Bitrue (@BitrueOfficial) 27 июня 2019 г.
The theft occurred on June 26 at 17:00, when the hacker took advantage of the vulnerability in the exchange’s Risk Control team’s second review process to their 90 users’ funds. Suspicious activity was promptly discovered when the hacker was withdrawing funds to other exchanges. Bitrue representatives contacted Huobi and Bittrex on the issue of freezing funds and accounts. The team also provided a link where users can track stolen funds.
At the moment, the exchange is not working, an investigation and technical maintenance are underway.
Image courtesy of Bitcoin Exchange Guide