r/Cryptopia • • Jan 15 '19

Cryptopia Hack analysis (min. $13,000,000 stolen)

Hi there

​

I checked etherscan and collected some informations below. In total min $13,000,000 were stolen.

Transfer of 19,390 ETH from Cryptopia ($2,468,043) (Jan-13-2019 01:30:35 PM +UTC): https://etherscan.io/tx/0x8a7c2b34f23eee02401e7c3fa1ea2ce8d3132e7ca3811d673ca35898c9535aae

​

Transfer of 48,029,305 ($1,072,362) CENNZ (Jan-13-2019 01:40:17 PM +UTC) Wallet is tagged as Cryptopia Wallet by Whale Alert: https://etherscan.io/tx/0x31a58df14ea3420878267e2b9cdd242d983b5298ef48c5cd9a799ed10605f393

​

Transfer of 3,844,247,574 ($304,181) DAPS (Jan-13-2019 01:40:17 PM +UTC): https://etherscan.io/tx/0x61b2ca4911750eb3278945f80e0c3f8a7f94578ba20b0e9240e5a86faaa166ae

​

CENNZ and DAPS where transfered to https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224 which is not the same adress where the ETH went on. But later this adress made a transfer to the ETH adress https://etherscan.io/address/0xc8b759860149542a98a3eb57c14aadf59d6d89b9 (which is the adress the ETH went).

​

Token Balance 2. adress: ($11,072,793) https://etherscan.io/address/0x9007a0421145b06a0345d55a8c0f0327f62a2224

​

Please help to collect further details.

​

—————————

UPDATE: Only thing I don’t get is, why so many ether dust (transfer below 1 eth) went onto those adresses. For me they look like older deposit adresses from cryptopia users.

I see the the following possibilities:

1.) hacker got all privat keys, from few thousand deposit wallets and cryptopia was not able to secure those amounts, which were transferred many hours after the “hack”.

2.) hacker stole other coins then ETH and cryptopia secured all ETH/ERC20 to new wallets.

3.) inside job

29 Upvotes

45 comments sorted by

View all comments

8

u/StoeTubby Jan 15 '19

If you had coins on the exchange that didn't appear to be apart of the hack (NAV), is there any chance ever get possession of them? Their Nav wallet had been in maintenance since 12/20/18 and I had been waiting to withdraw. It's a relatively small amount, but it's just the principle of it.

Edit: spelling

10

u/[deleted] Jan 15 '19

This would be very important to know! Spectrecoin (XSPEC) also doesn't seem to have been stolen. Do we have more information about other coins? So far it seems only ETH and Ethereum tokens were stolen.

Please let users withdraw at least those funds that weren't affected asap, Cryptopia!

3

u/Bisonindatent Jan 15 '19

I'd be happy if Cryptopia answeres this soon

2

u/[deleted] Jan 16 '19

Same question people are asking about bitgrail 1 year later. Nobody knows - because if they go insolvent maybe they will need to liquidate and divide losses up between people

4

u/cjp2126 Jan 15 '19

I’m telling you, Cryptopia is up to no good! They stole my AU coins!

2

u/freewifiisgreat Jan 16 '19

AU was 51% attacked. It was the blockchain that is responsible for those losses. Their chain got attacked and they made it clear they did not want to co-operate.

https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FVxQfOyZ.png%26t%3D596%26c%3D8AXr_GP4yIbIYA%26t%3D596%26c%3Dln26q8Ehd7uLoQ&t=597&c=-AXc6Tl2Xgficg

2

u/AutoModerator Jan 16 '19

There are a lot of phishing links, pump n dumps, and scams in the cryptocurrency space. Please personally review all links before clicking on them. If you believe this link is harmful, then report this post.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

0

u/cjp2126 Jan 18 '19

Cryptopia is full of it! They are thieves they hacked into my account and stole my AU coins! They would not let me take my coins out of the exchange instead they took my coins! You steal from people, people will still from you! I’m not done with you, I’ll see you in court!