Ariva Digital Key Breached - Revision history

Azoundria at 18:11, 14 May 2024

2024-05-14T18:11:04Z

← Older revision		Revision as of 12:11, 14 May 2024
Line 3:		Line 3:
	[[File:Arivadigital.jpg\|thumb\|Ariva Digital]]Ariva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any funds. They are apparently working on fund recovery, although there is no indication that the perpetrators have been identified.		[[File:Arivadigital.jpg\|thumb\|Ariva Digital]]Ariva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any funds. They are apparently working on fund recovery, although there is no indication that the perpetrators have been identified.

	This is a global/international case not involving a specific country.<ref name="coincunews-6799" /><ref name="arivadigital-6800" /><ref name="youtube-6801" /><ref name="arivacointwitter-6802" /><ref name="peckshieldalerttwitter-6803" /><ref name="bscscan-6804" />		This is a global/international case not involving a specific country.<ref name="coincunews-6799" /><ref name="arivadigital-6800" /><ref name="youtube-6801" /><ref name="arivacointwitter-6802" /><ref name="peckshieldalerttwitter-6803" /><ref name="bscscan-6804" /><ref name="comparitech-10032" />

	== About Ariva Digital ==		== About Ariva Digital ==
Line 117:		Line 117:
	<ref name="arivacointwitter-6805">[https://twitter.com/ArivaCoin/status/1497139558856675328 ArivaCoin - "Dear Ariva Family, we regret to inform you that one of our staking wallets was hacked last night. Our software security team has completed the necessary investigations and the cause of the leak has been determined." - Twitter] (Mar 3, 2022)</ref>		<ref name="arivacointwitter-6805">[https://twitter.com/ArivaCoin/status/1497139558856675328 ArivaCoin - "Dear Ariva Family, we regret to inform you that one of our staking wallets was hacked last night. Our software security team has completed the necessary investigations and the cause of the leak has been determined." - Twitter] (Mar 3, 2022)</ref>
	<ref name="coinmarketcap-6470">https://coinmarketcap.com/currencies/bnb/historical-data/ (Feb 15, 2022)</ref>		<ref name="coinmarketcap-6470">https://coinmarketcap.com/currencies/bnb/historical-data/ (Feb 15, 2022)</ref>
			<ref name="comparitech-10032">[https://www.comparitech.com/crypto/cryptocurrency-scams/ Worldwide crypto & NFT rug pulls and scams tracker - Comparitech] (Dec 15, 2022)</ref>
	</references>		</references>

Azoundria: Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.

2023-07-10T20:19:55Z

Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.

Show changes

Azoundria at 16:46, 3 April 2023

2023-04-03T16:46:19Z

← Older revision		Revision as of 10:46, 3 April 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/arivadigitalkeybreached.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/arivadigitalkeybreached.php}}
			{{Unattributed Sources}}

	[[File:Arivadigital.jpg\|thumb\|Ariva Digital]]Ariva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any funds. They are apparently working on fund recovery, although there is no indication that the perpetrators have been identified.		[[File:Arivadigital.jpg\|thumb\|Ariva Digital]]Ariva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any funds. They are apparently working on fund recovery, although there is no indication that the perpetrators have been identified.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="coincunews-6799" /><ref name="arivadigital-6800" /><ref name="youtube-6801" /><ref name="arivacointwitter-6802" /><ref name="peckshieldalerttwitter-6803" /><ref name="bscscan-6804" /><ref name="arivacointwitter-6805" /><ref name="coinmarketcap-6470" />

	== About Ariva Digital ==		== About Ariva Digital ==
Line 63:		Line 64:
	!Description		!Description
	\|-		\|-
	\|February 25th, 2022 2:21:00 AM		\|February 25th, 2022 2:21:00 AM MST
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 90:		Line 91:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			The way to protect the project was simple - use a multi-sig. The problem appears to have come about because there was only one key, and that key was compromised. Our framework proposes that uninsured user funds be placed in an offline multi-signature wallet, held by known trained individuals.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

	== Prevention Policies ==		== Platform Prevention Policies ==
	The way to protect the project was simple - use a multi-sig. The problem appears to have come about because there was only one key, and that key was compromised. Our framework proposes that uninsured user funds be placed in an offline multi-signature wallet, held by known trained individuals.		{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==
	[https://news.coincu.com/67759-ariva-digital-arv-is-a-rug-pull/ Ariva Digital ($ARV) is A Rug Pull! The team Withdrawn Tokens and Swapped Them To 1,700 WBNB! - CoinCu News] (Feb 26)		<references><ref name="coincunews-6799">[https://news.coincu.com/67759-ariva-digital-arv-is-a-rug-pull/ Ariva Digital ($ARV) is A Rug Pull! The team Withdrawn Tokens and Swapped Them To 1,700 WBNB! - CoinCu News] (Feb 26, 2022)</ref>

	[https://ariva.digital/ Ariva (ARV) - The new generation travel & tourism payment and reward system based on blockchain technology] (Mar 3)		<ref name="arivadigital-6800">[https://ariva.digital/ Ariva (ARV) - The new generation travel & tourism payment and reward system based on blockchain technology] (Mar 3, 2022)</ref>

	[https://www.youtube.com/watch?v=OftZx3nfJcA ARIVA (ARV) The new generation Travel & Tourism cryptocurrency - YouTube] (Mar 3)		<ref name="youtube-6801">[https://www.youtube.com/watch?v=OftZx3nfJcA ARIVA (ARV) The new generation Travel & Tourism cryptocurrency - YouTube] (Mar 3, 2022)</ref>

	[https://twitter.com/ArivaCoin/status/1498739473324126209 @ArivaCoin Twitter] (Mar 3)		<ref name="arivacointwitter-6802">[https://twitter.com/ArivaCoin/status/1498739473324126209 @ArivaCoin Twitter] (Mar 3, 2022)</ref>

	[https://twitter.com/PeckShieldAlert/status/1497060367025176579 @PeckShieldAlert Twitter] (Mar 3)		<ref name="peckshieldalerttwitter-6803">[https://twitter.com/PeckShieldAlert/status/1497060367025176579 @PeckShieldAlert Twitter] (Mar 3, 2022)</ref>

	[https://bscscan.com/address/0xcb25e1927d1fcc0beb11b492b96b0a351216260e https://bscscan.com/address/0xcb25e1927d1fcc0beb11b492b96b0a351216260e] (Mar 3)		<ref name="bscscan-6804">[https://bscscan.com/address/0xcb25e1927d1fcc0beb11b492b96b0a351216260e https://bscscan.com/address/0xcb25e1927d1fcc0beb11b492b96b0a351216260e] (Mar 3, 2022)</ref>

	[https://twitter.com/ArivaCoin/status/1497139558856675328 @ArivaCoin Twitter] (Mar 3)		<ref name="arivacointwitter-6805">[https://twitter.com/ArivaCoin/status/1497139558856675328 @ArivaCoin Twitter] (Mar 3, 2022)</ref>

	[https://coinmarketcap.com/currencies/bnb/historical-data/ https://coinmarketcap.com/currencies/bnb/historical-data/] (Feb 15)		<ref name="coinmarketcap-6470">[https://coinmarketcap.com/currencies/bnb/historical-data/ https://coinmarketcap.com/currencies/bnb/historical-data/] (Feb 15, 2022)</ref></references>

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/arivadigitalkeybreached.php}} Ariva DigitalAriva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any f..."

2023-01-28T16:51:35Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/arivadigitalkeybreached.php}} thumb|Ariva DigitalAriva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any f..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/arivadigitalkeybreached.php}}

[[File:Arivadigital.jpg|thumb|Ariva Digital]]Ariva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any funds. They are apparently working on fund recovery, although there is no indication that the perpetrators have been identified.

This is a global/international case not involving a specific country.

== About Ariva Digital ==
"Ariva is a cryptocurrency launched by Ariva Co., produced for active use in global and local tourism and travel networks in the near future. Project is a worldwide B2C travel & tourism network where members can meet with global and local tourism service providers in the light of previous travelers' experiences and comments, make bookings with cryptocurrencies, and earn crypto money from both their reservations and valuable content sharing."

"With the arrival of ARIVA, the digital payment system is about to experience a massive innovative turnaround that can change the world and make trading easier and better. ARV came into existence with the intention to make transactions hassle-free in global and local tourism networks in the near future."

"The project aims at achieving active use in the tourism and travel industry, which is one of the largest and most important industries of the world economy, although none of the previously produced cryptocurrencies have been targeted. Out to be the game-changer in the cryptocurrency world, ARIVA’s aim is not only to produce a cryptocurrency trade on exchange but to ensure that ARV is actively used in the tourism industry."

"Blockchain security firm PeckShield revealed on February 25 that developers behind Ariva Digital ($ARV) have withdrawn the Token from the staking contract and swapped it to 1,700 WBNB."

"Dear Ariva Family, we regret to inform you that one of our staking wallets was hacked last night. Our software security team has completed the necessary investigations and the cause of the leak has been determined."

"The @ArivaCoin's rugged funds 1,710 BNB (~$600k) have been deposited to @TornadoCash."

"Ariva has ample funding and power to handle this. As Ariva Team, we undertake that none of our investors will be victims. Ariva Staking Factory will not be active for a few days due to security measures."

"Thanks to the meticulous work of our entire team and legal department and the exchanges that did not spare their support, we have reached some very important footprints of the perpetrators."

"We've already initiated the criminal procedure through our lawyers against the perpetrators and presented our complaints to the police and other governmental institutions."

"As a result of our investigation of the staking contract, we have detected more than one suspicious transaction, so we will not activate the ASF temporarily."

"For maximum security, all refunds will be made as a direct transfer following a KYC verification and wallet review." "[W]e're not going anywhere, we're just getting started."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Ariva Digital Key Breached
!Date
!Event
!Description
|-
|February 25th, 2022 2:21:00 AM
|Main Event
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost has been estimated at $637,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
The total amount recovered is unknown.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
The way to protect the project was simple - use a multi-sig. The problem appears to have come about because there was only one key, and that key was compromised. Our framework proposes that uninsured user funds be placed in an offline multi-signature wallet, held by known trained individuals.

== References ==
[https://news.coincu.com/67759-ariva-digital-arv-is-a-rug-pull/ Ariva Digital ($ARV) is A Rug Pull! The team Withdrawn Tokens and Swapped Them To 1,700 WBNB! - CoinCu News] (Feb 26)

[https://ariva.digital/ Ariva (ARV) - The new generation travel & tourism payment and reward system based on blockchain technology] (Mar 3)

[https://www.youtube.com/watch?v=OftZx3nfJcA ARIVA (ARV) The new generation Travel & Tourism cryptocurrency - YouTube] (Mar 3)

[https://twitter.com/ArivaCoin/status/1498739473324126209 @ArivaCoin Twitter] (Mar 3)

[https://twitter.com/PeckShieldAlert/status/1497060367025176579 @PeckShieldAlert Twitter] (Mar 3)

[https://bscscan.com/address/0xcb25e1927d1fcc0beb11b492b96b0a351216260e https://bscscan.com/address/0xcb25e1927d1fcc0beb11b492b96b0a351216260e] (Mar 3)

[https://twitter.com/ArivaCoin/status/1497139558856675328 @ArivaCoin Twitter] (Mar 3)

[https://coinmarketcap.com/currencies/bnb/historical-data/ https://coinmarketcap.com/currencies/bnb/historical-data/] (Feb 15)