Leading Japanese cryptocurrency exchange Liquid, which was hit by hackers, stealing almost $100m (£73m), has revealed its effort to track and recover the said money.
In a public statement released on the cryptocurrency exchange’s blog, Liquid confirmed the heist and said that a total of approximately 91.35mm USDe of crypto-assets were moved out of Liquid wallets by an unauthorized party.
While confirming that 69 different crypto assets were misappropriated and sent to other exchanges or Defi swapping venues, it stated that Liquid’s teams are still assessing the attack vector used and taking measures to mitigate the impact to users.
Liquid assured their customers and said that they are currently tracing the movement of the assets and working with other exchanges to freeze and recover funds.
First Update 19-Aug-2021
At roughly 7:50 AM SGT on August 19th, Liquid’s Operations and Technology teams detected unauthorized access of some of the crypto wallets managed at Liquid.
Status of Liquid Services
- To ensure safety of funds, please do not deposit any crypto assets to your Liquid wallets until further notice.
- Liquid has halted all crypto withdrawals while we assess the impact.
- Fiat withdrawals and deposits remain available.
- Other services on Liquid, including trading and Liquid Earn, remain available.
Impact
The analysis of the impact is ongoing and is subject to change. Thus far we have determined the following data points:
- A total of approximately 91.35mm USDe of crypto assets were moved out of Liquid wallets by an unauthorized party.
- Of this amount, 16.13mm USDe of ERC-20 assets have been frozen (disabled for onchain movement) due to the assistance of the crypto community and other exchanges.
- 69 different crypto assets were misappropriated and sent to other exchanges or defi swapping venues.
- Assets placed in Liquid Earn are not impacted.
Liquid’s teams are still assessing the attack vector used and taking measures to mitigate the impact to users.
More information will be provided as it becomes available via Liquid Help Center & Liquid Global Twitter.
During this difficult period we greatly appreciate the support from our customers, other exchanges, security experts, and the broader crypto community. Liquid will continue to do everything in its power to mitigate the impact from this incident and restore full service as soon as possible.
These are the list of known addresses used by the un-authorised party:
| Currency | Wallet Address |
| BTC | 1Fx1bhbCwp5LU2gHxfRNiSHi1QSHwZLf7q |
| ETH/ERC-20 | 0x5578840aae68682a9779623fa9e8714802b59946 |
| ETH | 0xefb33ccafc98d5fdb27a6f5ff17350ca76bf3b53 |
| TRX | TSpcue3bDfZNTP1CutrRrDxRPeEvWhuXbp |
| XRP | rfapBqj7rUkGju7oHTwBwhEyXgwkEM4yby |
| Subsequent Movement Traced | |
| BTC | 12PKkwoFkXp6JtN7roWRA2gSitE6nVDds4 |
| BTC | 1JW1tcBXp1vZ6KGEirFNSXb5RgZSaL63Av |
| ERC20 | 0xff0f573bdf4c23e41ea3ecd82efa66828706b711 |
| ERC20 | 0x5d8ecef85058b33cc7130b975cfe07b548fee50a |
| ERC20 | 0xD66D9EC7f0D89E0E6698953a7f44158552fbaf8f |
| ERC20 | 0x262feb0550F3b6927ee5CBaa2fcfF77c1D270dbe |
| ERC20 | 0xec06a00df7fe291c9f872449385bd593e38d8133 |
| ERC20 | 0xaf9bdc92c920415cbcb8572a2dcb8aade778312b |
| ERC20 | 0xD66D9EC7f0D89E0E6698953a7f44158552fbaf8f |
The following assets were moved from Liquid’s compromised warm wallets:
| Currency | Amount (token units) |
| 1WO | 422,234.47 |
| AAVE | 226.12 |
| ALBT | 1,864,427.82 |
| AMLT | 2,626,879.51 |
| AMN | 5,604,056.42 |
| ANCT | 10,096,863.10 |
| BAAS | 10,023,709.46 |
| BAT | 4,465.33 |
| BFC | 1,063,271.82 |
| BIFI | 142,993.29 |
| BTC | 57.71 |
| CEL | 804,775.54 |
| COT | 43,179,685.23 |
| CRPT | 416,030.51 |
| DAI | 156,458.44 |
| DENT | 7,827,882.54 |
| DREAM | 41,189.77 |
| ENJ | 54,750.41 |
| ETH | 9,536.13 |
| EWT | 483,158.00 |
| FLIXX | 3,951,233.43 |
| FLP | 1,981,736.75 |
| FSN | 90,579.41 |
| FTX | 1,219,995.16 |
| GET | 190,806.41 |
| GOM2 | 1,635,175.00 |
| GYEN | 61,261,530.21 |
| GZE | 760,511.43 |
| IDRT | 1,604,850,918.37 |
| ILK | 100,191,837.81 |
| IND | 818,199.76 |
| KRL | 2,127,152.44 |
| LCX | 44,147,506.05 |
| LINK | 12,978.05 |
| LND | 3,216,461.32 |
| LPT | 904.4 |
| LTX | 217,757.60 |
| MCO | 1,373.10 |
| MITX | 2,103,607.28 |
| MKR | 4.88 |
| MTN | 1,269,920.54 |
| MVL | 4,392,174.87 |
| NII | 40,561,885.60 |
| ONG | 452,195.30 |
| PPP | 1,398,803.82 |
| QASH | 1,829,927.49 |
| QBZ | 5,158,115.56 |
| REN | 22,788.62 |
| RFOX | 44,379,216.85 |
| ROOBEE | 6,148,058.40 |
| RSR | 5,642,243.30 |
| RSV | 81,470.73 |
| SAND | 1,773,946.06 |
| SNX | 44,568.25 |
| SPDR | 3,009,229.82 |
| TON | 19,125.99 |
| TRX | 2,600,933.17 |
| UBT | 288,435.82 |
| UNI | 2,481.15 |
| USDC | 2,408,963.25 |
| USDT | 5,258,223.01 |
| VI | 256,230.48 |
| VIDY | 25,496,397.94 |
| WABI | 149,216.96 |
| WOM | 182,020.00 |
| XNO | 49,192,867.48 |
| XRP | 10,912,233.00 |
| XSGD | 639,843.46 |
| ZUSD | 299,805.48 |
All guest authors’ opinions are their own. Liquid does not endorse or adopt any such opinions, and we cannot guarantee any claims made in content written by guest authors.
This content is not financial advice and it is not a recommendation to buy or sell any cryptocurrency or engage in any trading or other activities. You must not rely on this content for any financial decisions. Acquiring, trading, and otherwise transacting with cryptocurrency involves significant risks. We strongly advise our readers to conduct their own independent research before engaging in any such activities.
Liquid does not guarantee or imply that any cryptocurrency or activity described in this content is available or legal in any specific reader’s location. It is the reader’s responsibility to know the applicable laws in his or her own country.
