\n
![](\"https:\/\/images.cointelegraph.com\/cdn-cgi\/image\/format=auto,onerror=redirect,quality=90,width=840\/https:\/\/s3.cointelegraph.com\/uploads\/2023-09\/3b60badc-8c5e-4123-b879-217dd1865750.jpg\")
<\/p>\n
\n<\/p>\n
Hong Kong-based cryptocurrency exchange CoinEx has revealed that compromised private keys allowed hackers to steal over $70 million of tokens as the team looks to open lines of communication to claw back funds.<\/p>\n
CoinEx representatives unpacked the finer details of their continuing investigation to Cointelegraph as the team works to build and deploy a new wallet architecture to restore impacted users and functionality of the platform.<\/p>\n
Despite an estimated $70 million worth of cryptocurrency being stolen from the platform, the exchange claims this amount represents a small percentage of its total assets under management. CoinEx stated that affected users will be compensated entirely for any lost funds.<\/p>\n
\n2\/ We’ve finalized our strategy to resume withdrawals and are set to progressively resume these services within 7 working days. Ensuring 100% asset security remains our top priority before reactivating withdrawal functionalities.<\/p>\n
\u2014 CoinEx Global (@coinexcom) September 18, 2023<\/a><\/p><\/blockquote>\n
CoinEx said that it was still investigating the identity of those responsible for the security breach, which a handful of blockchain security firms attribute to North Korean Lazarus Group hackers.<\/p>\n
\u201cAdditionally, we have opened communication channels to the hackers in hopes of proactive engagement toward a mutually agreeable resolution.\u201d<\/p><\/blockquote>\n
The exchange explained that a preliminary investigation pinned the root cause to a compromised private key for its hot wallets. These were used to store exchange assets for carrying out deposits and withdrawals.<\/p>\n
Related:\u00a0New York bans CoinEx exchange, seizes $1.7M in crypto assets<\/a><\/em><\/strong><\/p>\n
CoinEx suspended its withdrawal service to avoid further losses, patched system vulnerabilities and transferred the remaining assets from the affected hot wallets. The exchange told Cointelegraph that it expects to resume withdrawals progressively within seven working days.<\/p>\n
\u201cOur team is currently focused on building and deploying an entirely new and robust wallet system to handle activities within the 211 chains and 737 assets.\u201d<\/p><\/blockquote>\n
As Cointelegraph initially reported<\/a>, CoinEx first flagged \u201canomalous withdrawals\u201d from one of its hot wallets on Sept. 12, beginning with a transfer of 4,947 Ether (ETH<\/a>). The hackers then began withdrawing large amounts of other tokens to the same address.<\/p>\n
The value of stolen funds was first estimated at $27 million but has doubled in the week following the incident. <\/p>\n
North Korean hackers have preyed on the cryptocurrency space for the past few years and have been responsible for the largest thefts in the space to date. The\u00a02022 Axie Infinity Ronin Bridge hack alone saw over $650 million stolen.<\/p>\n
Blockchain analytics firm Chainalysis estimates that North Korean hackers have stolen around $340 million of cryptocurrency in 2023. This number is now expected to rise<\/a> with attributions made to the CoinEx hack and a $41 million hack of cryptocurrency gambling platform<\/a> Stake on Sept. 4.<\/p>\n
Collect this article as an NFT<\/a><\/em><\/strong> to preserve this moment in history and show your support for independent journalism in the crypto space.<\/em><\/em><\/p>\n
Magazine:\u00a0Web3 Gamer: PUBG devs\u2019 Web3 project, Animoca\u2019s $20M raise, Shardbound review<\/a><\/em><\/strong><\/p>\n<\/div>\n