User contributions for Azoundria

24 January 2023

• 21:2021:20, 24 January 2023 diff hist +10,503‎ N OvexTrade Withdrawal Fraud Platform ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ovextradewithdrawalfraudplatform.php}} thumb|OvexTradeScammers were setting up multiple fraudulent platforms such as OvexTrade, then offering loans on the BitcoinTalk forum. Participants reported that the loan application process included recording videos of themselves for a KYC validation. Once a loan applicant was approved, they would be informed that their bitcoin was sen..."
• 21:2021:20, 24 January 2023 diff hist 0‎ N File:Ovextrade.jpg ‎No edit summary current
• 21:2021:20, 24 January 2023 diff hist +7,533‎ N Sablier Developmental Exploit ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sablierdevelopmentalexploit.php}} thumb|SablierDuring an early version of the smart contract, the Sablier platform found that it was vulnerable. Users of this early platform version would have provided full access to their ethereum (ERC20) wallet, which would have exposed them to the full risk. The issue was ultimately fixed before it was exploited and Sablier continues to op..."
• 21:2021:20, 24 January 2023 diff hist 0‎ N File:Sablier.jpg ‎No edit summary current
• 21:1921:19, 24 January 2023 diff hist +4,415‎ N PayFair P2P Exchange Hacked ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/payfairp2pexchangehacked.php}} Ethereum is tricky to set up as a proper multi-signature wallet, since the functionality is not built-in and must instead be done through a smart contract. Smart contracts often have exploitable vulnerabilities. But more importantly, it does not make sense to trust an unknown entity in an unidentified country with your funds, regardless of whether the exchange claims..."
• 21:1921:19, 24 January 2023 diff hist +9,766‎ N WoToken Wallet Service ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/wotokenwalletservice.php}} The website was extremely simple and promised a "New Safe Platform". Users were instructed to "Download WO TOKEN DAPP, Create an account by phone number or email." There was an Android and iPhone version of the wallet. "WO TOKEN wallet can add mainstream digital asset like BTC ETH LTC ETC. Platform coin 'WOR' can exchange others." The only mention of profit was a "financ..."
• 21:1921:19, 24 January 2023 diff hist +6,969‎ N MakerDao Auction Lack of Validation ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/makerdaoauctionlackofvalidation.php}} thumb|MakerDAOThe MakerDAO auction platform had a vulnerability which would have allowed an attacker to create a fake bid without spending DAI, thereby effectively stealing the assets in question. The vulnerability was discovered and resolved before it was exploited. This is a global/international case not involving a specific country...."
• 21:1821:18, 24 January 2023 diff hist +5,666‎ N DDEX Exchange Price Manipulation ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ddexexchangepricemanipulation.php}} thumb|DDEXThe DDEX originally launched their lending platform with a vulnerability which would have allowed an attacker to manipulate the price of funds, which could have been used to empty the exchange platform. The issue was fixed before it resulted in any loss to any users. This is a global/international case not involving a specific count..."
• 21:1821:18, 24 January 2023 diff hist 0‎ N File:Ddex.jpg ‎No edit summary current
• 21:1821:18, 24 January 2023 diff hist +9,832‎ N Coinhouse Phishing Attack ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinhousephishingattack.php}} thumb|CoinhouseCoinHouse, a prominent cryptocurrency exchange in France, failed to secure their newsletter database, and this fell into the hands of phishers, who requested all customers to enter their personal information on a phishing website. The requests were highly convincing since they addressed customers by name, and redirected them to a..."
• 21:1821:18, 24 January 2023 diff hist 0‎ N File:Coinhouse.jpg ‎No edit summary current
• 21:1721:17, 24 January 2023 diff hist +12,474‎ N Cryptopia Ex-Employee Theft ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/cryptopiaexemployeetheft.php}} thumb|CryptopiaCryptopia had poor security policies, and one of the employees was able to access the private keys for the wallets. After Cryptopia went into liquidation, they therefore still had access to the hot wallets. Some users erroneously deposited funds there, and this employee was able to take them. After Grant Thompson started to dig a..."
• 21:1721:17, 24 January 2023 diff hist +6,243‎ N GhostMixer Relaunched As Scam Website ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ghostmixerrelaunchedasscamwebsite.php}} thumb|GhostMixerGhostMixer was a bitcoin mixing service launched around March 2018. Users could give bitcoin to receive mixed bitcoin. The service went offline around August 2018. Since that time, a fraudster set up a fake mixing service on the same domain. It does not appear that any funds have been sent to the mixer service. The co..."
• 21:1721:17, 24 January 2023 diff hist 0‎ N File:Ghostmixer.jpg ‎No edit summary current
• 21:1721:17, 24 January 2023 diff hist +6,832‎ N BZx Exchange Price Manipulation ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bzxexchangepricemanipulation.php}} thumb|BZxThe original bZx exchange platform contained a vulnerability which would allow an attacker to manipulate prices, which could have been used to steal platform assets. The vulnerability was fixed before it was able to be exploited. This is a global/international case not involving a specific country. == About BZx == bZx is "[t]he most p..."
• 21:1721:17, 24 January 2023 diff hist 0‎ N File:Bzx.jpg ‎No edit summary current
• 21:1621:16, 24 January 2023 diff hist +6,490‎ N BitWhisk Relaunched Fraud Site ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bitwhiskrelaunchedfraudsite.php}} thumb|BitWhiskBitWhisk was a bitcoin mixing service launched around March 2018. Users could give bitcoin to receive mixed bitcoin. The service went offline around November 2018 after mixing just 3 BTC. Since that time, a fraudster set up a fake mixing service on the same domain. A small amount of funds have been sent to the fraudulent mixer s..."
• 21:1621:16, 24 January 2023 diff hist 0‎ N File:Bitwhisk.jpg ‎No edit summary current
• 21:1621:16, 24 January 2023 diff hist +9,403‎ N CoinTiger PTT ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/cointigerpttcoldwalletbreach.php}} thumb|CoinTigerCoinTiger had the PTT token in a wallet without multi-sig. This wallet was breached, and all funds were taken. It does not appear that the exchange did anything to compensate the affected users. The Proton Chain also refused to upgrade their chain to assist. This exchange or platform is based in Singapore, or the incident t..."
• 21:1521:15, 24 January 2023 diff hist 0‎ N File:Cointiger.jpg ‎No edit summary current
• 21:1521:15, 24 January 2023 diff hist +16,464‎ N Exmount Holdings Group Scam ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/exmountholdingsgroupscam.php}} thumb|Exmount HoldingsExmount Holdings claimed to be a large investment brokerage, complete with a large website, physical address, and call center support. Many Australians were contacted by phone to invest, with investigators estimating the level of investment to far exceed $2.7m. Most of those affected were reportedly senior, and while..."
• 21:1521:15, 24 January 2023 diff hist 0‎ N File:Exmountholdings.jpg ‎No edit summary current
• 21:1421:14, 24 January 2023 diff hist +6,576‎ N EZ-BTC/Dave Smillie ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ezbtcdavesmillie.php}} Dave Smillie launched and largely single-handedly ran EZ-BTC, one of four firms entrusted with determining bitcoin price in Canada. No one had any visibility into the operation and even today, exact figures are not known about what is actually owed to customers of the exchange. Dave Smillie owes a sum of over $3.8m to his former business partner Rick Godwin, and there are fi..."
• 21:1421:14, 24 January 2023 diff hist +4,903‎ N Ledger Olusegun Alabi Theft ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ledgerolusegunalabitheft.php}} thumb|LedgerOn July 28th, 2019, the Ledger user Olusegun Alabi lost over 43 ETH, worth $8000 at the time. It's unclear how this compromise happened. Typically, this type of thing would happen through entering the seed phrase on a third party phishing website. This is a global/international case not involving a specific country. == About Ledger =..."
• 21:1421:14, 24 January 2023 diff hist +21,372‎ N InnovaMine Cloud Mining Operation ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/innovaminecloudminingoperation.php}} thumb|InnovaMineInnovaMine claimed to be a profitable cloud mining platform, where investors could deposit crypto-assets and earn a return, supposedly coming from mining. To build legitimacy they claimed registration with the Australian Securities & Investments Commission, and pointed to the valid registration of a company InnovaTrade PT..."
• 21:1421:14, 24 January 2023 diff hist 0‎ N File:Innovamine.jpg ‎No edit summary current
• 21:1321:13, 24 January 2023 diff hist +7,959‎ N 0x Invalid Signature Flaw ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/0xinvalidsignatureflaw.php}} thumb|0x ProjectThe 0x project offered a "liquidity aggregator" which is used as part of an online exchange. In order to use the exchange, a trader needs to sign the transaction. However, there was a way to bypass this mechanism, which could have allowed an attacker to conduct fraudulent trades. The exploit was fixed before any funds were taken...."
• 21:1321:13, 24 January 2023 diff hist 0‎ N File:0xproject.jpg ‎No edit summary current
• 21:1321:13, 24 January 2023 diff hist +13,645‎ N BitPoint Hot Wallet Hack ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bitpointtheft.php}} thumb|BitPointOn July 11th, 2019, the BitPoint exchange in Japan lost a mix of 1,225 bitcoin, 1,985 bitcoin cash, 11,169 ether, and 5,108 litecoin. All assets were stored in hot wallets, and the platform's cold wallets stayed safe. In this case, the exchange has stated they will be reimbursing the 50,000 affected customers. Services were resumed on August..."
• 21:1321:13, 24 January 2023 diff hist 0‎ N File:Bitpoint.jpg ‎No edit summary current
• 21:1221:12, 24 January 2023 diff hist +7,562‎ N Soxex Collapse ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/soxexcollapse.php}} thumb|SoxexLaunched by anonymous individuals and not appearing to be connected to any banking, the Soxex exchange gained popularity based largely on give-aways to new customers. Blockchain analysis showed that at least $1m USD was transferred to the exchange before it disappeared with no further word. The country for this case study is not yet known. == Ab..."
• 21:1221:12, 24 January 2023 diff hist 0‎ N File:Soxex.jpg ‎No edit summary current
• 21:1221:12, 24 January 2023 diff hist +6,497‎ N TLGUt5 Tron Contract Hacked ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/tlgut5troncontracthacked.php}} A tron contract named TLGUt5 had a small amount of funds removed through a "rollback attack", which is a similar concept to a 51% attack where the attacker is able to amass enough miners to take over the chain and rollback their transactions. The amount stolen was small. This is a global/international case not involving a specific country. == About TLGUt5 == "TPSHf..."
• 21:1221:12, 24 January 2023 diff hist +8,036‎ N Bitmarket Gone Without Warning ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bitmarketdisappearswithoutwarning.php}} The entire case is shrouded in mystery; however it seems that the exchange was operating with partial reserves for a long period of time, either the result of hacking or poorly managed finances. This was finally uncovered when the operators attempted to sell the exchange, and reported as fraud, which may have resulted in the forced closure. One hope was that..."
• 21:1121:11, 24 January 2023 diff hist +16,161‎ N UTorrent Super Community Collapses ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/utorrentsupercommunitycollapses.php}} thumb|UTorrent CommunityThe uTorrent Super Community claimed to be affiliated with Tron, when in reality no such affiliation existed. Many in the community sought clarity, and none was provided. Investors thought they could trust the scheme, and invested over $29m USD worth of funds. After the scheme collapsed, many thought they had b..."
• 21:1121:11, 24 January 2023 diff hist 0‎ N File:Tronutorrent.jpg ‎No edit summary current
• 21:1121:11, 24 January 2023 diff hist +13,103‎ N QuickBit Privacy Breach ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/quickbitprivacybreach.php}} thumb|QuickBitQuickBit provided real customer data to a contractor who was developing a MongoDB instance. This information was openly available for a few days, long enough to be discovered by security researchers. According to reports, data such as full name, address, login, and passwords were available (with no mention of encryption). QuickBit rep..."
• 21:1121:11, 24 January 2023 diff hist 0‎ N File:Quickbit.jpg ‎No edit summary current
• 21:1021:10, 24 January 2023 diff hist +17,144‎ N Koinex Shuts Down Regulatory Uncertainty ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/koinexshutsdownregulatoryuncertainty.php}} thumb|KoinexKoinex was one of the largest exchange platforms in India. The Indian central bank released guidance that all banks should refuse to interact with any cryptocurrency-related entities. Koinex's accounts were frozen and all transactions (even routine transactions like paying salaries) were regularly blocked. The platform was..."
• 21:1021:10, 24 January 2023 diff hist 0‎ N File:Koinex.jpg ‎No edit summary current
• 21:1021:10, 24 January 2023 diff hist +8,672‎ N Unknown Platform Cyber-Squatting ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/unknownplatformcybersquatting.php}} Users of an unnamed popular cryptocurrency exchange platform found themselves tricked into providing their assets to cybercriminals. The criminals set up sites which looked identical to the exchange, and were able to gain login and authentication details, ultimately making off with $27.2m USD of cryptocurrencies. The criminals were later brought to justice. Thi..."
• 21:1021:10, 24 January 2023 diff hist +8,882‎ N Synthetix Oracle Theft Incident ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/synthetixoracletheftincident.php}} thumb|SynthetixSynthetix relied on a limited number of price feeds for their automated synthetic assets system, which allowed an attacker to manipulate the price of Korean Won in order to steal $37m worth of assets. Since the system is centralized, they were able to shut it down in time, and the attacker was left with the option of graciou..."
• 21:1021:10, 24 January 2023 diff hist 0‎ N File:Synthetix.jpg ‎No edit summary current
• 21:0921:09, 24 January 2023 diff hist +16,404‎ N Bitrue Hot Wallet Breach ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bitruehotwalletbreach.php}} thumb|BitrueSingapore-based cryptocurrency exchange Bitrue was another exchange which suffered a hot wallet breach, apparently managing to bypass the review process of their Risk Control team. Bitrue has notified that all customers will be fully refunded and reportedly improved security significantly. A large portion of the lost funds were successful..."
• 21:0921:09, 24 January 2023 diff hist +5,641‎ N KeepKey Attackable With Physical Access ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/keepkeyattackablewithphysicalaccess.php}} thumb|KeepKeyWith physical access to a KeepKey hardware wallet, it is possible to obtain the seed phrase from the device. This is a global/international case not involving a specific country. == About KeepKey == "The Next Frontier of Crypto Security. Protect your cryptocurrencies, store your private keys offline, and safeguard your a..."
• 21:0921:09, 24 January 2023 diff hist 0‎ N File:Keepkey.jpg ‎No edit summary current
• 21:0821:08, 24 January 2023 diff hist +8,726‎ N TokenStore Ponzi Scheme Rug Pull ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/tokenstoreponzischemerugpull.php}} Limited information appears about the TokenStore ponzi scheme, which supposedly claimed $160,000,000 USD when it collapsed in June 10th, 2019. While the security firm Peckshield was involved with tracking down the funds, there is limited evidence that any funds were recovered. This is a global/international case not involving a specific country. == About TokenS..."
• 21:0821:08, 24 January 2023 diff hist +12,850‎ N Agama Wallet Malicious Upgrade ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/agamawalletmaliciousupgrade.php}} thumb|Agama WalletThe Agama Wallet was an online wallet which enabled storage and trading of multiple cryptocurrencies. The wallet used the NPM library, and was contributed by multiple developers. After making multiple useful commits to gain trust, a malicious developer added new code which stored seed phrases on a public server. The next releas..."
• 21:0821:08, 24 January 2023 diff hist 0‎ N File:Agama.jpg ‎No edit summary current
• 21:0821:08, 24 January 2023 diff hist +10,002‎ N Kraken Flash Crash (Suspected Theft) ‎ Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/krakenflashcrash(suspectedtheft).php}} thumb|KrakenOn the Kraken platform, there was a very large sell order for 1,200 bitcoin to CAD placed on June 2nd. The majority of the sold bitcoin (1,155 of them) ended up in a single account. As Kraken has existed since 2011, the most likely explanation is that an early adopter purchased 1,200 bitcoin and left them on the exchange. Thei..."