CryptoLoss

All incidents · Jul 18, 2024

Assets were moved out of a WazirX multisig wallet

WazirXExchangeContainedEthereum

On July 18, 2024, WazirX said a multisig wallet had a security incident, and it paused rupee and crypto withdrawals. On July 21 the official account wrote the theft as more than $230 million. Before that official figure, Cyvers reported $234.9 million. Elliptic said it was linked to North Korea. A loss-sharing plan proposed later is not a completed reimbursement.

Loss
230million USD
WazirX, more than $230 million · as of Jul 21, 2024

Other figures

  • Loss234.9million USDCyvers · as of Jul 18, 2024

Sequence

Newest first · UTC

Jul 272024 · Sat

  1. Someone criticized the loss-sharing plan, and the plan itself is not reimbursement

    Statement · Sumit Gupta

    The Block recorded that on July 27 WazirX used a vote to propose sharing the loss among users. CoinDCX co-founder Sumit Gupta criticized this as making users bear 45% of the loss. The vote and this criticism are not reimbursement already paid into user accounts. They are not recorded as a reimbursement figure.

    Making customers directly absorb the 45% losses is utter nonsense.

    The Block · Aug 8, 2024

Jul 212024 · Sun

  1. The company wrote the loss as more than $230 million

    Confirmation · WazirX

    The WazirX blog said that on July 18 a multisig wallet was hit by a cyberattack. More than $230 million in digital assets was stolen. This wallet used Liminal's custody and wallet infrastructure. The blog said rupee and crypto deposits and withdrawals had been paused, and that all trading had been paused. The white-hat bounty was written as 10% of the stolen amount, up to $23 million. There was also a tip reward of up to 10,000 USDT. The bounty is a proposal. It is not a figure already recovered.

    On July 18, 2024, WazirX experienced a cyber attack on one of our multisig wallets, resulting in the theft of digital assets exceeding $230 million.

    WazirX · Jul 21, 2024

Jul 182024 · Thu

  1. Elliptic said the attacker was linked to North Korea

    Statement · Elliptic

    TechCrunch wrote that Elliptic said the attacker was linked to North Korea. This is the security firm's claim. These materials do not contain a naming by the FBI, the Treasury, or any other law-enforcement or sanctions agency.

  2. WazirX confirmed the multisig wallet incident and paused withdrawals

    Halt · WazirX · @WazirXIndia

    WazirX said it knew one multisig wallet had had a security incident. The team was investigating. To protect assets, rupee and crypto withdrawals were temporarily stopped. This post did not state an amount.

    We're aware that one of our multisig wallets has experienced a security breach. Our team is actively investigating the incident. To ensure the safety of your assets, INR and crypto withdrawals will be temporarily paused.

    WazirX · Jul 18, 2024
  3. Cyvers reported $234.9 million

    Alert · Cyvers · @CyversAlerts

    Before the official figure was published, Cyvers posted that WazirX's Safe multisig wallet on Ethereum showed several suspicious transactions. A total of $234.9 million was moved to a new address. This is a security firm's alert.

    A total of $234.9M of your funds have been moved to a new address.

    Cyvers · Jul 18, 2024