Poloniex Withdrawal Hack - Revision history

Azoundria: Another 30 minutes. Revised the incident description. Added information about Poloniex founder and ultimate acquisitions. Added information about the amount lost and updated the total. Numerous revisions of the article text.

2024-03-08T18:25:46Z

Another 30 minutes. Revised the incident description. Added information about Poloniex founder and ultimate acquisitions. Added information about the amount lost and updated the total. Numerous revisions of the article text.

Show changes

Azoundria: Another 30 minutes complete. Further review of BitcoinTalk thread and polling information. All sources merged in. Added default content for every section to replace placeholder content. Review and revision of the article overall.

2024-03-07T21:51:15Z

Another 30 minutes complete. Further review of BitcoinTalk thread and polling information. All sources merged in. Added default content for every section to replace placeholder content. Review and revision of the article overall.

← Older revision		Revision as of 15:51, 7 March 2024
Line 1:		Line 1:
	{{Case Study Under Construction~~}}{{Unattributed Sources~~}}[[File:Poloniex.jpg\|thumb\|Poloniex Logo/Homepage]]Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.		{{Case Study Under Construction}}[[File:Poloniex.jpg\|thumb\|Poloniex Logo/Homepage]]Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="bitcointalk-192" /><ref name="slowmisthacked-1160" />

	~~https://bitcointalk.org/index.php?topic=499580.msg5507709#msg5507709~~

	~~https://bitcointalk.org/index.php?topic=500157.20~~

	== About Poloniex ==		== About Poloniex ==
Line 17:		Line 11:

	== The Reality ==		== The Reality ==
	~~This sections is included if~~ a ~~case involved deception or information that was unknown~~ at ~~the time~~. ~~Examples include:~~		Unfortunately, the original version of the Poloniex platform had a vulnerability where a user could place multiple withdrawal requests at once, and all requests would be honoured. However, the balance was only checked prior to the first request. This allowed a user to create as many initial requests as they wanted. Once all requests were fulfilled, they would be left with a negative balance and more funds than they originally had.

	* When the ~~service~~ was ~~actually started (if different than~~ the ~~"official story")~~.
	* Who actually ran a ~~service and their own personal history~~.
	* How the service was structured behind the scenes. (For example, ~~there was no "trading bot".)~~
	* Details of what audits reported and ~~how vulnerabilities were missed during auditing~~.

	== What Happened ==		== What Happened ==
	The ~~specific events of the loss and how it came about. What actually happened~~ to ~~cause~~ the ~~loss and some of the events leading up to it~~.		The vulnerability was exploited to withdraw 97 BTC from the Poloniex platform.
	{\| class="wikitable"		{\| class="wikitable"
	\|+Key Event Timeline - Poloniex Withdrawal Hack		\|+Key Event Timeline - Poloniex Withdrawal Hack
Line 39:		Line 28:
	\|BitcoinTalk Thread		\|BitcoinTalk Thread
	\|A new thread is posted in the BitcoinTalk forum which covers the event<ref name="bitcointalk-192" />. It's posted by busoni, who is the proclaimed Owner of Poloniex<ref name="bitcointalk-192" />.		\|A new thread is posted in the BitcoinTalk forum which covers the event<ref name="bitcointalk-192" />. It's posted by busoni, who is the proclaimed Owner of Poloniex<ref name="bitcointalk-192" />.
			\|-
			\|March 4th, 2014 9:31:09 AM MST
			\|Poll For Path Forward
			\|BitcoinTalk user DarkTrix runs a poll on what should be done to repay users<ref name=":7">[https://bitcointalk.org/index.php?topic=500157.0 DarkTrix - How to Deal with Poloniex situation - BitcoinTalk] (Accessed Mar 7, 2024)</ref>. Members suggest various solutions, including issuing shares, implementing SMS verification, and raising transaction fees<ref name=":7">[https://bitcointalk.org/index.php?topic=500157.0 DarkTrix - How to Deal with Poloniex situation - BitcoinTalk] (Accessed Mar 7, 2024)</ref>. Some propose distributing "Polopoints" as compensation or splitting losses among all users<ref name=":7">[https://bitcointalk.org/index.php?topic=500157.0 DarkTrix - How to Deal with Poloniex situation - BitcoinTalk] (Accessed Mar 7, 2024)</ref>. Others advocate for transparency regarding the incident and providing detailed information<ref name=":7">[https://bitcointalk.org/index.php?topic=500157.0 DarkTrix - How to Deal with Poloniex situation - BitcoinTalk] (Accessed Mar 7, 2024)</ref>. Despite differing opinions, there's a consensus on the urgency of resolving the situation and improving security measures<ref name=":7">[https://bitcointalk.org/index.php?topic=500157.0 DarkTrix - How to Deal with Poloniex situation - BitcoinTalk] (Accessed Mar 7, 2024)</ref>. Members express frustration with the exchange's handling of the situation and emphasize the importance of restoring trust among users<ref name=":7">[https://bitcointalk.org/index.php?topic=500157.0 DarkTrix - How to Deal with Poloniex situation - BitcoinTalk] (Accessed Mar 7, 2024)</ref>.
			\|-
			\|March 4th, 2014 9:41:58 AM MST
			\|Poll For Path Forward
			\|busoni runs a poll to get the opinion of others as to what should be done to repay funds to users<ref name=":8">[https://bitcointalk.org/index.php?topic=499580.msg5507709#msg5507709 busoni - "I would like to thank everyone for their support and understanding. It really means a lot. Having other people's money taken under my watch has made me feel just about as awful as I've ever felt in my life." - BitcoinTalk] (Accessed Mar 7, 2024)</ref>. He also clarifies that he wouldn't feel it was fair to charge a portion of the funds from those who deposited after the breach<ref name=":8">[https://bitcointalk.org/index.php?topic=499580.msg5507709#msg5507709 busoni - "I would like to thank everyone for their support and understanding. It really means a lot. Having other people's money taken under my watch has made me feel just about as awful as I've ever felt in my life." - BitcoinTalk] (Accessed Mar 7, 2024)</ref>.
	\|-		\|-
	\|July 2nd, 2014 8:29:00 AM MDT		\|July 2nd, 2014 8:29:00 AM MDT
Line 59:		Line 56:

	== Total Amount Lost ==		== Total Amount Lost ==
	Multiple sources have reported the loss as 97 BTC<ref name="slowmisthacked-1160" /><ref name="coinsutra-202" /><ref name="kylegibson-86" /><ref name=":4">[https://web.archive.org/web/20240305234402/https://hacked.slowmist.io/?c=Exchange&page=8 SlowMist Exchange Hacks - Page 8 Archive March 5th, 2024 4:44:02 PM MST] (Accessed Mar 5, 2024)</ref>.		Multiple sources have reported the loss as 97 BTC<ref name="bitcoinmagazine-6" /><ref name="slowmisthacked-1160" /><ref name="coinsutra-202" /><ref name="kylegibson-86" /><ref name=":4">[https://web.archive.org/web/20240305234402/https://hacked.slowmist.io/?c=Exchange&page=8 SlowMist Exchange Hacks - Page 8 Archive March 5th, 2024 4:44:02 PM MST] (Accessed Mar 5, 2024)</ref>.

	Kyle Gibson claims the amount lost is $1,000 USD<ref name="kylegibson-86" />.		Kyle Gibson claims the amount lost is $1,000 USD<ref name="kylegibson-86" />.
Line 77:		Line 74:

	Throughout the thread, there is a mix of support for Poloniex, suggestions for improvement, and skepticism regarding the handling of the incident. Some members express confidence in Poloniex's security measures, while others voice concerns about the security vulnerabilities and the fairness of fund reimbursement procedures<ref name=":5">[https://bitcointalk.org/index.php?topic=499580.240 Re: BTC Stolen from Poloniex - BitcoinTalk] (Accessed Mar 6th, 2024)</ref>.		Throughout the thread, there is a mix of support for Poloniex, suggestions for improvement, and skepticism regarding the handling of the incident. Some members express confidence in Poloniex's security measures, while others voice concerns about the security vulnerabilities and the fairness of fund reimbursement procedures<ref name=":5">[https://bitcointalk.org/index.php?topic=499580.240 Re: BTC Stolen from Poloniex - BitcoinTalk] (Accessed Mar 6th, 2024)</ref>.

			=== Polls About Path Forward ===
			Multiple polls were run through BitcoinTalk<ref name=":7" /><ref name=":8" />. Members suggested various solutions, including issuing shares, implementing SMS verification, and raising transaction fees. Some propose distributing "Polopoints" as compensation or splitting losses among all users. Others advocate for transparency regarding the incident and providing detailed information. Despite differing opinions, there's a consensus on the urgency of resolving the situation and improving security measures. Members express frustration with the exchange's handling of the situation and emphasize the importance of restoring trust among users.

	=== Controversy About Late Depositors ===		=== Controversy About Late Depositors ===
Line 103:		Line 103:

	== Ongoing Developments ==		== Ongoing Developments ==
	~~What parts of~~ this ~~case are still remaining to be concluded?~~		The Poloniex platform continues to operate. CoinSutra reports that there may have been additional hacks against the Poloniex platform in 2017, however this has not been confirmed<ref name="coinsutra-202" />.
	== Individual Prevention Policies ==		== Individual Prevention Policies ==
	While no individuals lost funds in this case, there was an inability to access or use those funds for the duration of the incident while balances were temporarily reduced.		While no individuals lost funds in this case, there was an inability to access or use those funds for the duration of the incident while balances were temporarily reduced.

Azoundria: Another 30 minutes. Integrating and reviewing information from BitcoinTalk forum. Integrated information/timing from blockchain potential thief's address. Blockchain analysis further.

2024-03-06T22:09:03Z

Another 30 minutes. Integrating and reviewing information from BitcoinTalk forum. Integrated information/timing from blockchain potential thief's address. Blockchain analysis further.

← Older revision		Revision as of 16:09, 6 March 2024
Line 2:		Line 2:

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="bitcointalk-192" /><ref name="slowmisthacked-1160" />		This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="bitcointalk-192" /><ref name="slowmisthacked-1160" />

	~~https://bitcointalk.org/index.php?topic=499580.240~~

	~~https://www.blockchain.com/explorer/addresses/btc/1Ktq7TE3J5vZ3c99M5weqKfFcNkHQdqPrq~~

	~~https://www.blockchain.com/explorer/addresses/btc/1Ktq7TE3J5vZ3c99M5weqKfFcNkHQdqPrq~~

	https://bitcointalk.org/index.php?topic=499580.msg5507709#msg5507709		https://bitcointalk.org/index.php?topic=499580.msg5507709#msg5507709
Line 37:		Line 31:
	!Event		!Event
	!Description		!Description
			\|-
			\|March 3rd, 2014 5:05:41 AM MST
			\|First Theft Withdrawal
			\|The first withdrawal into what is believed to be the thief's wallet<ref name=":3">[https://www.blockchain.com/explorer/addresses/btc/1Ktq7TE3J5vZ3c99M5weqKfFcNkHQdqPrq Potential Poloniex Exploiter Address - Blockchain.com] (Accessed Mar 6, 2024)</ref><ref>[https://www.blockchain.com/explorer/transactions/btc/48eeb4473aa32f9561e73d5024b9b1cb41a6030f7120a448d9e6db3bfb75113a First Blockchain Transaction In Thief's Wallet - Blockchain.com] (Accessed Mar 6, 2024)</ref>.
	\|-		\|-
	\|March 4th, 2014 1:31:32 AM MST		\|March 4th, 2014 1:31:32 AM MST
Line 57:		Line 55:
	== Technical Details ==		== Technical Details ==
	"The hacker discovered that if you place several withdrawals all in practically the same instant, they will get processed at more or less the same time. This will result in a negative balance, but valid insertions into the database, which then get picked up by the withdrawal daemon." “The major problem here was that withdrawals should have been queued at every step of the way. This could not have happened if withdrawal requests were processed sequentially instead of simultaneously. Additionally, auditing and security features were not explicitly looking for negative balances. They add deposits and withdrawals and check that accounts are in balance. If you have 2 BTC, withdraw 10 BTC, and are left with -8 BTC, the software would see that you deposited 2, withdrew 10, and have exactly what you should: -8.”		"The hacker discovered that if you place several withdrawals all in practically the same instant, they will get processed at more or less the same time. This will result in a negative balance, but valid insertions into the database, which then get picked up by the withdrawal daemon." “The major problem here was that withdrawals should have been queued at every step of the way. This could not have happened if withdrawal requests were processed sequentially instead of simultaneously. Additionally, auditing and security features were not explicitly looking for negative balances. They add deposits and withdrawals and check that accounts are in balance. If you have 2 BTC, withdraw 10 BTC, and are left with -8 BTC, the software would see that you deposited 2, withdrew 10, and have exactly what you should: -8.”

			Potential Exploiter Address: 1Ktq7TE3J5vZ3c99M5weqKfFcNkHQdqPrq <ref name=":3" />

	== Total Amount Lost ==		== Total Amount Lost ==
	Multiple sources have reported the loss as 97 BTC<ref name="~~kylegibson~~-86" /><ref name="~~slowmisthacked~~-~~1160~~" /><ref name="~~coinsutra~~-~~202~~" />.		Multiple sources have reported the loss as 97 BTC<ref name="slowmisthacked-1160" /><ref name="coinsutra-202" /><ref name="kylegibson-86" /><ref name=":4">[https://web.archive.org/web/20240305234402/https://hacked.slowmist.io/?c=Exchange&page=8 SlowMist Exchange Hacks - Page 8 Archive March 5th, 2024 4:44:02 PM MST] (Accessed Mar 5, 2024)</ref>.

	Kyle Gibson claims the amount lost is $1,000 USD<ref name="kylegibson-86" />.		Kyle Gibson claims the amount lost is $1,000 USD<ref name="kylegibson-86" />.
Line 66:		Line 66:

	== Immediate Reactions ==		== Immediate Reactions ==
	~~How did~~ the ~~various parties involved (firm, platform, management, and~~/~~or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?~~		Poloniex admitted to the failure in a BitcoinTalk thread titled "BTC Stolen from Poloniex"<ref name="bitcointalk-192" />.

			=== Poloniex Admission Of Failure ===
	“I sincerely apologize for this,” Poloniex’s owner wrote in a statement, “and I am very grateful to the many people who have already expressed their support and belief in my character. I take full responsibility; I will be donating some of my own money, and I will not be taking profit before the debt is paid.” “the company has committed to operating at a fractional reserve until it can replenish the losses itself.”		“I sincerely apologize for this,” Poloniex’s owner wrote in a statement, “and I am very grateful to the many people who have already expressed their support and belief in my character. I take full responsibility; I will be donating some of my own money, and I will not be taking profit before the debt is paid.” “the company has committed to operating at a fractional reserve until it can replenish the losses itself.”

			=== Reactions From BitcoinTalk Community ===
			The discussion unfolds with various forum members expressing their views and concerns regarding the incident and its implications. One member, cubicdissection, defends Poloniex, emphasizing the challenges of running a business and commending the exchange's efforts to address the situation transparently. Another member, chiznitz, provides technical insights into potential security measures to prevent similar incidents in the future<ref name=":5">[https://bitcointalk.org/index.php?topic=499580.240 Re: BTC Stolen from Poloniex - BitcoinTalk] (Accessed Mar 6th, 2024)</ref>.

			Poloniex's owner, represented by the username busoni, acknowledges the gravity of the situation and seeks input from the community on how to address the stolen funds. Options such as paying back over time with exchange fees or selling shares of Poloniex are discussed<ref name=":5">[https://bitcointalk.org/index.php?topic=499580.240 Re: BTC Stolen from Poloniex - BitcoinTalk] (Accessed Mar 6th, 2024)</ref>.

			Throughout the thread, there is a mix of support for Poloniex, suggestions for improvement, and skepticism regarding the handling of the incident. Some members express confidence in Poloniex's security measures, while others voice concerns about the security vulnerabilities and the fairness of fund reimbursement procedures<ref name=":5">[https://bitcointalk.org/index.php?topic=499580.240 Re: BTC Stolen from Poloniex - BitcoinTalk] (Accessed Mar 6th, 2024)</ref>.

			=== Controversy About Late Depositors ===
			One repeated theme of concern were users who had deposited after the exploit, and whose funds were trapped due to the allowing of deposits and not withdrawals<ref name=":6">[https://bitcointalk.org/index.php?topic=499580.260 Re: BTC Stolen from Poloniex Page 14 - BitcoinTalk] (Accessed Mar 6, 2023)</ref>. Busoni suggested that he planned to make an exception for those users early on<ref>[https://bitcointalk.org/index.php?topic=499580.msg5507709#msg5507709 Busoni - "About recent deposits--it really wouldn't be fair to deduct deposits made after the BTC was taken. Obviously I should have posted a notice on the Balances page, but it is not difficult to make an exception for recent deposits." - BitcoinTalk] (Accessed Mar 6, 2024)</ref>, however there was still concern despite this<ref name=":6">[https://bitcointalk.org/index.php?topic=499580.260 Re: BTC Stolen from Poloniex Page 14 - BitcoinTalk] (Accessed Mar 6, 2023)</ref>.<blockquote>About recent deposits--it really wouldn't be fair to deduct deposits made after the BTC was taken. Obviously I should have posted a notice on the Balances page, but it is not difficult to make an exception for recent deposits.</blockquote>

	== Ultimate Outcome ==		== Ultimate Outcome ==
Line 84:		Line 95:

	=== Inclusion And Recognition ===		=== Inclusion And Recognition ===
	The incident was ultimately included in lists compiled by Bitcoin Magazine<ref name="bitcoinmagazine-6" />, Kyle Gibson<ref name="kylegibson-86" />, , the Bitcoin Exchange Guide<ref name="bitcoinexchangeguide-218" />, and Slowmist<ref name="slowmisthacked-1160" />. It received recognition as one of the top 6 attacks by CoinSutra<ref name="coinsutra-202" /> and one of the top 5 attacks by CoinTelegraph<ref name="cointelegraph-197" />, although it is unclear what it was about the Poloniex hack that warranted such mention.		The incident was ultimately included in lists compiled by Bitcoin Magazine<ref name="bitcoinmagazine-6" />, Kyle Gibson<ref name="kylegibson-86" />, , the Bitcoin Exchange Guide<ref name="bitcoinexchangeguide-218" />, and Slowmist<ref name="slowmisthacked-1160" /><ref name=":4" />. It received recognition as one of the top 6 attacks by CoinSutra<ref name="coinsutra-202" /> and one of the top 5 attacks by CoinTelegraph<ref name="cointelegraph-197" />, although it is unclear what it was about the Poloniex hack that warranted such mention.

	== Total Amount Recovered ==		== Total Amount Recovered ==
Line 94:		Line 105:
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
	== Individual Prevention Policies ==		== Individual Prevention Policies ==
	~~{{Prevention:Individuals:Placeholder}}~~		While no individuals lost funds in this case, there was an inability to access or use those funds for the duration of the incident while balances were temporarily reduced.

	{{Prevention:Individuals:Avoid Third Party Custodians}}		{{Prevention:Individuals:Avoid Third Party Custodians}}
Line 103:		Line 114:

	== Platform Prevention Policies ==		== Platform Prevention Policies ==
	{{Prevention:Platforms:~~Placeholder~~}}

			{{Prevention:Platforms:Implement Multi-Signature}}

			{{Prevention:Platforms:Regular Audit Procedures}}

			{{Prevention:Platforms:Establish Industry Insurance Fund}}

	{{Prevention:Platforms:End}}		{{Prevention:Platforms:End}}
Line 109:		Line 126:
	== Regulatory Prevention Policies ==		== Regulatory Prevention Policies ==
	{{Prevention:Regulators:Placeholder}}		{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:Platform Security Assessments}}

			{{Prevention:Regulators:Establish Industry Insurance Fund}}

	{{Prevention:Regulators:End}}		{{Prevention:Regulators:End}}

Azoundria: Another 30 minutes complete. Expanded article. Integrated 6 different sources. Adding more information on the repayment of users of the Poloniex hack. Integrated CoinTelegraph top 5 position article.

2024-03-06T00:56:27Z

Another 30 minutes complete. Expanded article. Integrated 6 different sources. Adding more information on the repayment of users of the Poloniex hack. Integrated CoinTelegraph top 5 position article.

Show changes

Azoundria at 22:48, 4 March 2024

2024-03-04T22:48:36Z

← Older revision		Revision as of 16:48, 4 March 2024
Line 80:		Line 80:
	== Individual Prevention Policies ==		== Individual Prevention Policies ==
	{{Prevention:Individuals:Placeholder}}		{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:Avoid Third Party Custodians}}

			{{Prevention:Individuals:Store Funds Offline}}

	{{Prevention:Individuals:End}}		{{Prevention:Individuals:End}}

Azoundria at 22:47, 4 March 2024

2024-03-04T22:47:06Z

← Older revision		Revision as of 16:47, 4 March 2024
Line 1:		Line 1:
	{{Case Study Under Construction}}{{Unattributed Sources}}		{{Case Study Under Construction}}{{Unattributed Sources}}[[File:Poloniex.jpg\|thumb\|Poloniex Logo/Homepage]]Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.

	Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="kylegibson-86" /><ref name="bitcointalk-192" /><ref name="cointelegraph-197" /><ref name="coinsutra-202" /><ref name="bitcoinexchangeguide-218" /><ref name="slowmisthacked-1160" />		This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="kylegibson-86" /><ref name="bitcointalk-192" /><ref name="cointelegraph-197" /><ref name="coinsutra-202" /><ref name="bitcoinexchangeguide-218" /><ref name="slowmisthacked-1160" />

Azoundria: Another 30 minutes complete. Information from about section integrated around. Added information from homepage and logo. Cleaning up the article further.

2024-03-04T22:46:14Z

Another 30 minutes complete. Information from about section integrated around. Added information from homepage and logo. Cleaning up the article further.

← Older revision		Revision as of 16:46, 4 March 2024
Line 16:		Line 16:

	== About Poloniex ==		== About Poloniex ==
	~~This~~ exchange or platform ~~is based in United States~~, or the ~~incident targeted people primarily in United States~~.		Poloniex welcomed users to its fast and secure exchange platform, offering the ability to trade bitcoins for various cryptocurrencies<ref name=":0">[https://web.archive.org/web/20140308062434/https://www.poloniex.com/ Poloniex Homepage Archive March 7th, 2014 11:24:34 PM MST] (Accessed Mar 4, 2024)</ref>. The platform lists a wide range of currencies, including Litecoin, Dogecoin, Namecoin, and many others<ref name=":0">[https://web.archive.org/web/20140308062434/https://www.poloniex.com/ Poloniex Homepage Archive March 7th, 2014 11:24:34 PM MST] (Accessed Mar 4, 2024)</ref>. Users can sign up for an account if they don't have one already, or utilize the navigation tabs provided to begin trading<ref name=":0">[https://web.archive.org/web/20140308062434/https://www.poloniex.com/ Poloniex Homepage Archive March 7th, 2014 11:24:34 PM MST] (Accessed Mar 4, 2024)</ref>. With its diverse selection of cryptocurrencies and intuitive platform layout, Poloniex aimed to cater to the needs of cryptocurrency traders of all levels<ref name=":0">[https://web.archive.org/web/20140308062434/https://www.poloniex.com/ Poloniex Homepage Archive March 7th, 2014 11:24:34 PM MST] (Accessed Mar 4, 2024)</ref>.

	~~The background of the~~ exchange ~~platform~~, ~~service~~, or ~~individuals involved~~, as ~~it would have been seen or understood at the time of the events~~.		Poloniex was a US-based cryptocurrency exchange<ref name=":1">[https://web.archive.org/web/20141011215150/https://www.poloniex.com/ Poloniex Homepage Archive October 11th, 2014 3:51:50 PM MDT] (Accessed Mar 4, 2024)</ref>. With just a valid email address, traders could start trading within minutes by creating an account or signing in if already a member<ref name=":1">[https://web.archive.org/web/20141011215150/https://www.poloniex.com/ Poloniex Homepage Archive October 11th, 2014 3:51:50 PM MDT] (Accessed Mar 4, 2024)</ref>. The platform promised best-in-class tools such as stop-limit orders to minimize trading risk, customizable SMA and two EMA lines, and candlesticks ranging from 5 minutes to 4 hours, along with fully zoomable charts covering complete market history<ref name=":1">[https://web.archive.org/web/20141011215150/https://www.poloniex.com/ Poloniex Homepage Archive October 11th, 2014 3:51:50 PM MDT] (Accessed Mar 4, 2024)</ref>.

	~~Include~~:		The platform emphasized community and support, resolving all support tickets promptly and with care<ref name=":1" />. It boasts an active chatbox community for idea-sharing and updates, with chatbox moderators on hand to address users' immediate questions and concerns<ref name=":1" />.

	* Known history of when and how the service was started.		Homepage:<ref name=":0">[https://web.archive.org/web/20140308062434/https://www.poloniex.com/ Poloniex Homepage Archive March 7th, 2014 11:24:34 PM MST] (Accessed Mar 4, 2024)</ref><ref name=":1" />
	* What problems does the company or service claim to solve?
	* What marketing materials were used by the firm or business?
	* Audits performed, and excerpts that may have been included.
	* Business registration documents shown (fake or legitimate).
	* How were people recruited to participate?
	* Public warnings and announcements prior to the event.

	~~Don't Include:~~
	* Any wording which directly states or implies that the business is/~~was illegitimate~~, ~~or that a vulnerability existed.~~
	* Anything that wasn't reasonably knowable at the time of the event.
	~~There could be more than one section here. If the same platform is involved with multiple incidents~~, ~~then it can be linked to a main article page.~~

	== The Reality ==		== The Reality ==
Line 65:		Line 54:
	== Total Amount Lost ==		== Total Amount Lost ==
	The total amount lost has been estimated at $662,000 USD.		The total amount lost has been estimated at $662,000 USD.

	~~How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?~~

	== Immediate Reactions ==		== Immediate Reactions ==
Line 80:		Line 67:

	The incident was ultimately included in lists compiled by Bitcoin Magazine<ref name="bitcoinmagazine-6" />, Kyle Gibson<ref name="kylegibson-86" />, the Bitcoin Exchange Guide<ref name="bitcoinexchangeguide-218" />, and Slowmist<ref name="slowmisthacked-1160" />.		The incident was ultimately included in lists compiled by Bitcoin Magazine<ref name="bitcoinmagazine-6" />, Kyle Gibson<ref name="kylegibson-86" />, the Bitcoin Exchange Guide<ref name="bitcoinexchangeguide-218" />, and Slowmist<ref name="slowmisthacked-1160" />.

			=== Updated Homepage ===
			The Poloniex homepage following the incident appeared to take a more security-focused approach. In terms of security, Poloniex promised to ensure the safety of customer funds by keeping the majority of them in cold storage<ref name=":1" />. The entire exchange reported undergoing continual audits and inspections to detect any unusual activity, with two-factor authentication available for added protection<ref name=":1" />.

	== Total Amount Recovered ==		== Total Amount Recovered ==

Azoundria: Another 30 minutes complete. Started on about section. A ton of reading mostly. Found lots of forum threads.

2024-02-28T19:49:19Z

Another 30 minutes complete. Started on about section. A ton of reading mostly. Found lots of forum threads.

← Older revision		Revision as of 13:49, 28 February 2024
Line 1:		Line 1:
	{{~~Imported~~ Case Study ~~2\|source=https://www.quadrigainitiative.com/casestudy/poloniexwithdrawalhack.php~~}}		{{Case Study Under Construction}}{{Unattributed Sources}}
	{{Unattributed Sources}}

	Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.		Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="kylegibson-86" /><ref name="bitcointalk-192" /><ref name="cointelegraph-197" /><ref name="coinsutra-202" /><ref name="bitcoinexchangeguide-218" /><ref name="slowmisthacked-1160" />		This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="kylegibson-86" /><ref name="bitcointalk-192" /><ref name="cointelegraph-197" /><ref name="coinsutra-202" /><ref name="bitcoinexchangeguide-218" /><ref name="slowmisthacked-1160" />

			https://bitcointalk.org/index.php?topic=499580.240

			https://www.blockchain.com/explorer/addresses/btc/1Ktq7TE3J5vZ3c99M5weqKfFcNkHQdqPrq

			https://www.blockchain.com/explorer/addresses/btc/1Ktq7TE3J5vZ3c99M5weqKfFcNkHQdqPrq

			https://bitcointalk.org/index.php?topic=499580.msg5507709#msg5507709

			https://bitcointalk.org/index.php?topic=500157.20

	== About Poloniex ==		== About Poloniex ==
	"The hacker discovered that if you place several withdrawals all in practically the same instant, they will get processed at more or less the same time. This will result in a negative balance, but valid insertions into the database, which then get picked up by the withdrawal daemon." “The major problem here was that withdrawals should have been queued at every step of the way. This could not have happened if withdrawal requests were processed sequentially instead of simultaneously. Additionally, auditing and security features were not explicitly looking for negative balances. They add deposits and withdrawals and check that accounts are in balance. If you have 2 BTC, withdraw 10 BTC, and are left with -8 BTC, the software would see that you deposited 2, withdrew 10, and have exactly what you should: -8.” “I sincerely apologize for this,” Poloniex’s owner wrote in a statement, “and I am very grateful to the many people who have already expressed their support and belief in my character. I take full responsibility; I will be donating some of my own money, and I will not be taking profit before the debt is paid.” “the company has committed to operating at a fractional reserve until it can replenish the losses itself.”

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.		This exchange or platform is based in United States, or the incident targeted people primarily in United States.

Line 48:		Line 55:
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
	\|-		\|-
	\|		\|March 4th, 2014 1:31:32 AM MST
	\|		\|BitcoinTalk Thread
	\|		\|A new thread is posted in the BitcoinTalk forum which covers the event. It's posted by busoni, who is the proclaimed Owner of Poloniex.
	\|}		\|}

			== Technical Details ==
			"The hacker discovered that if you place several withdrawals all in practically the same instant, they will get processed at more or less the same time. This will result in a negative balance, but valid insertions into the database, which then get picked up by the withdrawal daemon." “The major problem here was that withdrawals should have been queued at every step of the way. This could not have happened if withdrawal requests were processed sequentially instead of simultaneously. Additionally, auditing and security features were not explicitly looking for negative balances. They add deposits and withdrawals and check that accounts are in balance. If you have 2 BTC, withdraw 10 BTC, and are left with -8 BTC, the software would see that you deposited 2, withdrew 10, and have exactly what you should: -8.”

	== Total Amount Lost ==		== Total Amount Lost ==
Line 60:		Line 70:
	== Immediate Reactions ==		== Immediate Reactions ==
	How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?		How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

			“I sincerely apologize for this,” Poloniex’s owner wrote in a statement, “and I am very grateful to the many people who have already expressed their support and belief in my character. I take full responsibility; I will be donating some of my own money, and I will not be taking profit before the debt is paid.” “the company has committed to operating at a fractional reserve until it can replenish the losses itself.”

	== Ultimate Outcome ==		== Ultimate Outcome ==
	~~What was~~ the ~~end result? Was any investigation done? Were any individuals prosecuted? Was~~ there a ~~lawsuit? Was any tracing done?~~

			Owner busoni came clean about the withdrawals and balance shortfall of all users on the platform.<blockquote>I take full responsibility for this and am committed to repaying the debt of BTC. The exchange funds are 12.3% short. Because there is not enough BTC to cover everyone's balances, all balances will temporarily be deducted by 12.3%. Please understand that this is an absolute necessity--if I did not make this adjustment, people would most likely withdraw all their BTC as soon as possible in order to make sure they weren't left in that remaining 12.3%. Aside from the obvious drawback of most of the BTC being taken out of the exchange, this would not be fair--some people would get all of their money right away, and a few would get none right away.</blockquote>


			The incident was ultimately included in lists compiled by Bitcoin Magazine<ref name="bitcoinmagazine-6" />, Kyle Gibson<ref name="kylegibson-86" />, the Bitcoin Exchange Guide<ref name="bitcoinexchangeguide-218" />, and Slowmist<ref name="slowmisthacked-1160" />.

	== Total Amount Recovered ==		== Total Amount Recovered ==
Line 89:		Line 106:

	== References ==		== References ==
	<references><ref name="bitcoinmagazine-6">[https://bitcoinmagazine.com/articles/infographic-overview-compromised-bitcoin-exchange-events Infographic: An Overview of Compromised Bitcoin Exchange Events] (Jan 30, 2020)</ref>		<references>
			<ref name="bitcoinmagazine-6">[https://bitcoinmagazine.com/articles/infographic-overview-compromised-bitcoin-exchange-events Infographic: An Overview of Compromised Bitcoin Exchange Events - Bitcoin Magazine] (Jan 30, 2020)</ref>
	<ref name="kylegibson-86">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>		<ref name="kylegibson-86">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents - Kyle Gibson] (Jan 25, 2020)</ref>
			<ref name="bitcointalk-192">[https://bitcointalk.org/index.php?topic=499580 BTC Stolen from Poloniex - BitcoinTalk] (Mar 1, 2020)</ref>
	<ref name="bitcointalk-192">[https://bitcointalk.org/index.php?topic=499580 BTC Stolen from Poloniex] (Mar 1, 2020)</ref>		<ref name="cointelegraph-197">[https://cointelegraph.com/news/crypto-exchange-hacks-in-review-proactive-steps-and-expert-advice Crypto Exchange Hacks in Review: Proactive Steps and Expert Advice - CoinTelegraph] (Mar 2, 2020)</ref>
			<ref name="coinsutra-202">[https://coinsutra.com/biggest-bitcoin-hacks/ Top 6 Biggest Bitcoin Hacks Ever - CoinSutra] (Mar 2, 2020)</ref>
	<ref name="cointelegraph-197">[https://cointelegraph.com/news/crypto-exchange-hacks-in-review-proactive-steps-and-expert-advice Crypto Exchange Hacks in Review: Proactive Steps and Expert Advice] (Mar 2, 2020)</ref>

	<ref name="coinsutra-202">[https://coinsutra.com/biggest-bitcoin-hacks/ Top 6 Biggest Bitcoin Hacks Ever] (Mar 2, 2020)</ref>

	<ref name="bitcoinexchangeguide-218">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>		<ref name="bitcoinexchangeguide-218">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>
			<ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 26, 2021)</ref>
	<ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 26, 2021)</ref></references>		</references>

Azoundria at 23:56, 12 April 2023

2023-04-12T23:56:06Z

← Older revision		Revision as of 17:56, 12 April 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/poloniexwithdrawalhack.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/poloniexwithdrawalhack.php}}
	{{Unattributed ~~Citations~~}}		{{Unattributed Sources}}

	Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.		Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.		This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="bitcoinmagazine-6" /><ref name="kylegibson-86" /><ref name="bitcointalk-192" /><ref name="cointelegraph-197" /><ref name="coinsutra-202" /><ref name="bitcoinexchangeguide-218" /><ref name="slowmisthacked-1160" />
	<ref name="bitcoinmagazine-6" /><ref name="kylegibson-86" /><ref name="bitcointalk-192" /><ref name="cointelegraph-197" /><ref name="coinsutra-202" /><ref name="bitcoinexchangeguide-218" /><ref name="slowmisthacked-1160" />

	== About Poloniex ==		== About Poloniex ==
Line 45:		Line 44:
	!Description		!Description
	\|-		\|-
	\|March 1st, 2014 12:00:28 AM		\|March 1st, 2014 12:00:28 AM MST
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 72:		Line 71:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			Coming soon.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

	== Prevention Policies ==		== Platform Prevention Policies ==
	~~Coming soon.~~		{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==
	<references><ref name="bitcoinmagazine-6">[https://bitcoinmagazine.com/articles/infographic-overview-compromised-bitcoin-exchange-events Infographic: An Overview of Compromised Bitcoin Exchange Events] (Jan 29, 2020)</ref>		<references><ref name="bitcoinmagazine-6">[https://bitcoinmagazine.com/articles/infographic-overview-compromised-bitcoin-exchange-events Infographic: An Overview of Compromised Bitcoin Exchange Events] (Jan 30, 2020)</ref>

	<ref name="kylegibson-86">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>		<ref name="kylegibson-86">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>

	<ref name="bitcointalk-192">[https://bitcointalk.org/index.php?topic=499580 BTC Stolen from Poloniex] (~~Feb 29~~, 2020)</ref>		<ref name="bitcointalk-192">[https://bitcointalk.org/index.php?topic=499580 BTC Stolen from Poloniex] (Mar 1, 2020)</ref>

	<ref name="cointelegraph-197">[https://cointelegraph.com/news/crypto-exchange-hacks-in-review-proactive-steps-and-expert-advice Crypto Exchange Hacks in Review: Proactive Steps and Expert Advice] (Mar 1, 2020)</ref>		<ref name="cointelegraph-197">[https://cointelegraph.com/news/crypto-exchange-hacks-in-review-proactive-steps-and-expert-advice Crypto Exchange Hacks in Review: Proactive Steps and Expert Advice] (Mar 2, 2020)</ref>

	<ref name="coinsutra-202">[https://coinsutra.com/biggest-bitcoin-hacks/ Top 6 Biggest Bitcoin Hacks Ever] (Mar 1, 2020)</ref>		<ref name="coinsutra-202">[https://coinsutra.com/biggest-bitcoin-hacks/ Top 6 Biggest Bitcoin Hacks Ever] (Mar 2, 2020)</ref>

	<ref name="bitcoinexchangeguide-218">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>		<ref name="bitcoinexchangeguide-218">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>

	<ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25, 2021)</ref></references>		<ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 26, 2021)</ref></references>

Azoundria at 00:48, 16 February 2023

2023-02-16T00:48:26Z

← Older revision		Revision as of 18:48, 15 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/poloniexwithdrawalhack.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/poloniexwithdrawalhack.php}}
			{{Unattributed Citations}}

	Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.		Hot wallets are almost always hackable, whether for a silly error like this one or for more complicated exploits. Poloniex is interesting in that it presently claims insurance on the front of the website, and expressly denies having insurance in the terms of service. They’re also apparently based in the United States and working with regulators, yet unable to serve any residents of the United States. Hopefully they have real hot wallet insurance which can be used in the event of any future hacks.

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.		This exchange or platform is based in United States, or the incident targeted people primarily in United States.
			<ref name="bitcoinmagazine-6" /><ref name="kylegibson-86" /><ref name="bitcointalk-192" /><ref name="cointelegraph-197" /><ref name="coinsutra-202" /><ref name="bitcoinexchangeguide-218" /><ref name="slowmisthacked-1160" />

	== About Poloniex ==		== About Poloniex ==
Line 23:		Line 25:

	Don't Include:		Don't Include:

	* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.		* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
	* Anything that wasn't reasonably knowable at the time of the event.		* Anything that wasn't reasonably knowable at the time of the event.
Line 45:		Line 46:
	\|-		\|-
	\|March 1st, 2014 12:00:28 AM		\|March 1st, 2014 12:00:28 AM
	\|~~First~~ Event		\|Main Event
	\|~~This is an expanded~~ description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
	\|-
	\|
	\|
	\|
	\|-		\|-
	\|		\|
Line 58:		Line 55:

	== Total Amount Lost ==		== Total Amount Lost ==
	The total amount lost ~~is unknown~~.		The total amount lost has been estimated at $662,000 USD.

	How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?		How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Line 69:		Line 66:

	== Total Amount Recovered ==		== Total Amount Recovered ==
	~~It is unknown how much was~~ recovered.		There do not appear to have been any funds recovered in this case.

	What funds were recovered? What funds were reimbursed for those affected users?		What funds were recovered? What funds were reimbursed for those affected users?
Line 80:		Line 77:

	== References ==		== References ==
	[https://bitcoinmagazine.com/articles/infographic-overview-compromised-bitcoin-exchange-events Infographic: An Overview of Compromised Bitcoin Exchange Events] (Jan 29)		<references><ref name="bitcoinmagazine-6">[https://bitcoinmagazine.com/articles/infographic-overview-compromised-bitcoin-exchange-events Infographic: An Overview of Compromised Bitcoin Exchange Events] (Jan 29, 2020)</ref>

	[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 24)		<ref name="kylegibson-86">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>

	[https://bitcointalk.org/index.php?topic=499580 BTC Stolen from Poloniex] (Feb 29)		<ref name="bitcointalk-192">[https://bitcointalk.org/index.php?topic=499580 BTC Stolen from Poloniex] (Feb 29, 2020)</ref>

	[https://cointelegraph.com/news/crypto-exchange-hacks-in-review-proactive-steps-and-expert-advice Crypto Exchange Hacks in Review: Proactive Steps and Expert Advice] (Mar 1)		<ref name="cointelegraph-197">[https://cointelegraph.com/news/crypto-exchange-hacks-in-review-proactive-steps-and-expert-advice Crypto Exchange Hacks in Review: Proactive Steps and Expert Advice] (Mar 1, 2020)</ref>

	[https://coinsutra.com/biggest-bitcoin-hacks/ Top 6 Biggest Bitcoin Hacks Ever] (Mar 1)		<ref name="coinsutra-202">[https://coinsutra.com/biggest-bitcoin-hacks/ Top 6 Biggest Bitcoin Hacks Ever] (Mar 1, 2020)</ref>

	[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 4)		<ref name="bitcoinexchangeguide-218">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>

	[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25)		<ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25, 2021)</ref></references>