All incidents · Jul 18, 2024
Assets were moved out of a WazirX multisig wallet
WazirXExchangeContainedEthereum
On July 18, 2024, WazirX said a multisig wallet had a security incident, and it paused rupee and crypto withdrawals. On July 21 the official account wrote the theft as more than $230 million. Before that official figure, Cyvers reported $234.9 million. Elliptic said it was linked to North Korea. A loss-sharing plan proposed later is not a completed reimbursement.
Other figures
- Loss234.9million USDCyvers · as of Jul 18, 2024
Sequence
Newest first · UTC
Jul 272024 · Sat
Someone criticized the loss-sharing plan, and the plan itself is not reimbursement
Statement · Sumit Gupta
The Block recorded that on July 27 WazirX used a vote to propose sharing the loss among users. CoinDCX co-founder Sumit Gupta criticized this as making users bear 45% of the loss. The vote and this criticism are not reimbursement already paid into user accounts. They are not recorded as a reimbursement figure.
Making customers directly absorb the 45% losses is utter nonsense.
Jul 212024 · Sun
The company wrote the loss as more than $230 million
Confirmation · WazirX
The WazirX blog said that on July 18 a multisig wallet was hit by a cyberattack. More than $230 million in digital assets was stolen. This wallet used Liminal's custody and wallet infrastructure. The blog said rupee and crypto deposits and withdrawals had been paused, and that all trading had been paused. The white-hat bounty was written as 10% of the stolen amount, up to $23 million. There was also a tip reward of up to 10,000 USDT. The bounty is a proposal. It is not a figure already recovered.
On July 18, 2024, WazirX experienced a cyber attack on one of our multisig wallets, resulting in the theft of digital assets exceeding $230 million.
Jul 182024 · Thu
Elliptic said the attacker was linked to North Korea
Statement · Elliptic
TechCrunch wrote that Elliptic said the attacker was linked to North Korea. This is the security firm's claim. These materials do not contain a naming by the FBI, the Treasury, or any other law-enforcement or sanctions agency.
WazirX confirmed the multisig wallet incident and paused withdrawals
Halt · WazirX · @WazirXIndia
WazirX said it knew one multisig wallet had had a security incident. The team was investigating. To protect assets, rupee and crypto withdrawals were temporarily stopped. This post did not state an amount.
We're aware that one of our multisig wallets has experienced a security breach. Our team is actively investigating the incident. To ensure the safety of your assets, INR and crypto withdrawals will be temporarily paused.
Cyvers reported $234.9 million
Alert · Cyvers · @CyversAlerts
Before the official figure was published, Cyvers posted that WazirX's Safe multisig wallet on Ethereum showed several suspicious transactions. A total of $234.9 million was moved to a new address. This is a security firm's alert.
A total of $234.9M of your funds have been moved to a new address.