Xeggex Exchange Collapses After Suspicious Withdrawals
Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.
Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!
About Xeggex
Xeggex claims to offer a comprehensive suite of services tailored to cryptocurrency traders and investors. The platform provides access to Spot Markets, where users can buy and sell over 450 different assets across more than 1,100 markets. The interface is designed for simplicity, making it accessible for both novice and experienced traders. This allows users to engage in trading activities with ease and efficiency. Additionally, Xeggex offers Liquidity Pools, which enable users to provide liquidity and earn rewards from transaction fees and other bonuses generated by the platform's activities.
The platform also facilitates Peer-to-Peer (P2P) Trading, allowing users to trade cryptocurrencies directly with one another globally, with a very low fee of just 0.2%. This provides greater flexibility for traders who prefer dealing with peers rather than through centralized exchanges. For users interested in digital art and collectibles, Xeggex hosts an NFT Marketplace, where individuals can discover, buy, and sell NFTs, expanding their trading opportunities beyond traditional cryptocurrencies. Furthermore, the platform includes Faucets, enabling users to claim free cryptocurrency or create faucets to promote certain assets.
A key feature that Xeggex promotes is its native XPE Token, which offers various benefits. By holding XPE tokens in their accounts, users can reduce their trading and withdrawal fees, pay for liquidity pool participation, and promote their assets on the platform. The use of XPE can save users up to 25% on fees, making it an attractive incentive for active traders. This native token is central to Xeggex's ecosystem and aims to enhance the overall user experience by offering financial savings and additional utility across the platform.
To cater to the needs of on-the-go traders, Xeggex also offers a mobile app available for both Android and iOS devices, allowing users to trade conveniently from their smartphones. The platform's emphasis on ultra-low fees is a significant selling point, especially for those who choose to use XPE tokens for fee payments. Lastly, Xeggex provides a variety of market pairs, from popular cryptocurrencies like Bitcoin and Ethereum to lesser-known altcoins, ensuring a diverse range of trading opportunities for all types of users.
The Reality
It is alleged that the Xeggex platform was actually operated by Paul Vernon.
What Happened
Starting on February 3rd, 2025, users no longer had access to their funds.
| Date | Event | Description |
|---|---|---|
| February 3rd, 2025 2:34:00 AM MST | Xeggex Announces CEO Hacked | Xeggex posts on Twitter/X to announce that their CEO had their Telegram account hacked. |
| February 6th, 2025 1:18:00 PM MST | James Tylee Telegram Muted | James Tylee reports that he is muted from the official Xeggex Telegram group chat, shortly after providing commands which can assist with recovering the MongoDB database. |
| February 6th, 2025 3:04:00 PM MST | Using Percona Database | A screenshot of Telegram chat reports that the exchange team is claiming that the expert they were meeting with is unable to help them because they are using Percona database rather than MongoDB. |
Technical Details
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?
Total Amount Lost
The total amount lost is unknown.
How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Immediate Reactions
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?
Ultimate Outcome
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?
Total Amount Recovered
There do not appear to have been any funds recovered in this case.
What funds were recovered? What funds were reimbursed for those affected users?
Ongoing Developments
The situation remains ongoing.
Individual Prevention Policies
No specific policies for individual prevention have yet been identified in this case.
For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.
Platform Prevention Policies
Policies for platforms to take to prevent this situation have not yet been selected in this case.
For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.
Regulatory Prevention Policies
No specific regulatory policies have yet been identified in this case.
For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.
References
- ↑ Rekt - Plant a Red Flag (Accessed Mar 5, 2025)
- ↑ James Tylee - "The @xeggex hacking is 110% an exit scam! They’re saying they have oplogs & opcode for the mongoDB opLogReplay. They claim they have a mongoDB expert they are waiting on. I posted: mongorestore --oplogReplay --dir /path/to/backup ...ter/X (Accessed Mar 5, 2025)
- ↑ @Smoll_Spin Twitter (Accessed Mar 5, 2025)
- ↑ Xeggex - "Dear users, in this hard time our CEO was hacked and he lost tg account and xeggex community group beside that we still don't know details about it. Also what is important in this moment is that we succeed to lock down wallets so funds a...ter/X (Accessed Mar 5, 2025)
- ↑ XeggeX Cryptocurrency Exchange (Accessed Mar 5, 2025)