Over $150M Drained in KuCoin Crypto Exchange Hack

Over $150 million of an Asian cryptocurrency exchange’s funds have been compromised in a security breach.

The Singapore-headquartered digital asset exchange KuCoin said in a statement that it detected large withdrawals of bitcoin (BTC) and ethereum (ETH) tokens to an unknown wallet beginning at 19:05 UTC time on Friday. 

In a live stream on 4:30 UTC time Saturday, KuCoin CEO Johnny Lyu said that one or more hackers obtained the private keys to the exchange’s hot wallets. KuCoin transferred what was left in them to new hot wallets, abandoned the old ones and froze customer deposits and withdrawals, Lyu said.

Related: Ocean Protocol Forks to Retrieve Tokens Stolen From KuCoin Exchange

KuCoin’s cold wallets were unaffected, Lyu claimed. Cold cryptocurrency wallets are not connected to the Internet and are considered more secure than hot cryptocurrency wallets. 

In an updated statement on its website, KuCoin released a list of BTC, bitcoin SV (BSV), ETH, LTC, XRP, Stellar lumens (XLM), Tron (TRX) and Tether (USDT) wallet addresses where the stolen funds were transferred.

Two Ethereum wallets belonging to KuCoin have sent more than 11,480 ETH, which currently trades at a price of about $350, to the Ethereum wallet address associated with the hack, according to data from blockchain explorer Etherscan.

The Ethereum wallet address has also received over 150 Ethereum-based tokens worth more than $150 million from the two KuCoin Ethereum wallets, Etherscan’s data shows.

Related: First Mover: Bitcoin Low Exchange Balance Looks Bullish but Chart Looks Bearish as $11K Nears

The other identified wallets have received exactly 14,713 BSV, 26,733 LTC, 18,495,798 XRP and 999,160 USDT, along with over 1,008 BTC, 9,588,383 XLM, and 199,038,936 TRX, according to blockchain explorers Blockchair and Tronscan.

The cryptocurrencies are trading around roughly $10,700 per BTC, $165 per BSV, $45 per LTC, $0.25 per XRP, $0.07 per XLM, $0.02 per TRX and $1 per USDT, as of writing.

Tether and several cryptocurrency exchanges such as Bitfinex have blacklisted the wallet addresses, according to the updated statement.

Over 200 cryptocurrency assets trade on KuCoin with a combined daily average volume of around $100 million, ranking it as one of the busiest trading exchanges, according to the cryptocurrency data site CoinGecko.

The price of KuCoin’s exchange token KCS fell by 14% to $0.86 within an hour on Saturday as news of the security breach spread on social media. 

KuCoin is investigating the hack with international law enforcement and stolen customer money will be “covered completely” by an insurance fund, Lyu said.

UPDATE (Sept. 27, 2020, 1:00 UTC): Addresses and balances for cryptocurrency wallets associated with KuCoin’s hack have been added.

Related Stories

• Bitcoin Balances on Exchanges at 2-Year Low and That May Be a Bullish Sign
• Russian Web Censor Tells Binance It’s Been Blacklisted – Three Months Late

The views and opinions expressed herein are the views and opinions of the author and do not necessarily reflect those of Nasdaq, Inc.