Exchange Leak Puts $620K-Worth of Customer Crypto at Risk

A new exchange from South Korea leaked critical information about 19 of its users, a mistake that could have cost them $620,000 in cryptocurrency.

AccessTimeIconJun 26, 2018 at 6:00 a.m. UTC
Updated Sep 13, 2021 at 8:06 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

A South Korea-based exchange has inadvertently leaked sensitive information about 19 of its users, potentially putting some $620,000 worth of cryptocurrency at risk.

According to a report from CoinDesk Korea , an employee of Bitkoex, an exchange launched in May, posted information on how much of the Karma (KRM) cryptocurrency was held by 19 users on the platform in a social media chat last Friday

The report said the leaked message contained the email addresses associated with the users as well as the wallet addresses and private keys to the KRM token in their accounts, which could allow anyone with the information to access the assets.

The total amount of the token owned by the users worth 750 million won, or around $620,000, the report said.

Following the event, Bitkoex said the employee posted the message by accident and the exchange has moved the exposed assets to a cold wallet, which is not accessible through the internet. As such, the company asserted no assets have been lost.

Yet, this is not the first time that user information had been leaked from a Korean crypto exchange.

As previously reported by CoinDesk, the computer of an employee from Bithumb, one of the largest crypto exchanges in South Korea by trading volume, was hacked earlier last year. Information of as many as 30,000 users on the platform was subsequently leaked.

In fact, yesterday's report said the country's Ministry of Science and ICT inspected the information security level of 21 crypto exchanges in South Korea from January to March and confirmed that most companies have security vulnerabilities.

Just last week, Bithumb said that around $31 million in cryptocurrency was stolen by hackers from the platform.

Key image via Shutterstock

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.