According to a , 7000 $, a large number of user API keys, 2FA codes, and very likely additional vulnerable info has been compromised and stolen by hackers.
The techniques used to hack the exchange includes phishing, viruses and other attacks, and they state that there may even be additional affected accounts that have not yet been identified.
The hacked accounts for 2% of the total holdings, and reassures that cold wallets remain unharmed.
The hackers patiently waited for the right moment to execute a series of well-orchestrated actions through multiple accounts and the most opportune time, and as a result, the transaction passed their existing security checks, and thus, they were unable to block the withdrawal before it was executed.
Once withdrawn, a series of alarms were triggered in the system and all withdrawals were immediately stopped.
Funds are relatively #SAFU
According to itself, all funds will be recovered from the , and no user funds will be affected by the hack. A series of additional security reviews have been estimated to take a week from now, and they will keep the community updated frequently as they progress forward.
As a result, deposits and withdrawals will remain suspended during this period of time, but will continue to be enabled.
According to themselves, hackers may still be in control of certain user accounts and may use the compromised accounts to affect prices on .
CZ Twitter AMA continues
In a final note from CZ, he states that the previously scheduled will continue.
Published at Wed, 08 May 2019 03:13:18 +0000