A cryptocurrency exchange that only launched in the last few months says it has been hit by a hack that it can't afford to cover.
Altsbit – a platform reported to be based in Italy, though it doesn't make this clear on its website or social media – announced the breach last Thursday, stating on Twitter: "Unfortunately we have to notify you with the fact that our exchange was hacked during the night and almost all funds from BTC, ETH, ARRR and VRSC were stolen. A small part of the funds are safe on cold wallets."
An update on the company's website now indicates that "fortunately a good part of the coins were kept on cold storage" and that it will issue partial refunds, not having the wherewithal to fully compensate users.
The cryptocurrencies taken in the hack are now listed as:
- Bitcoin (BTC): 6,929 lost out of 14,782 held
- Ether (ETH): 23,210 lost out of 32,262
- Pirate Chain (ARRR): 3,924,082 lost out of 9,619,754
- Verus Coin (VRSC): 414,154 lost out of 852,726
- Komodo (KMD): 1,066 lost out of 48,015
The site said users who saw losses must apply for their partial refunds. The bitcoin and ether stolen were valued at around $72.5 million at press time.
Customers of the exchange will need to get their applications in quickly, with exchange saying: "Refunds will begin on February 10, 2020, and end on May 8, 2020; after this date it will no longer be possible to request a refund as the Altsbit platform will be terminated."
Black-hat hacking group LulzSec appears to have claimed responsibility for the theft on its Twitter feed, saying: "We assure that @altsbit didn't had (sic) proper security to stop Lulz Canon. Many others to follow. Better Stack up the Security - Note to other Exchanges."
The group, a number of whose members have been arrested, has been linked to previous major hacks including one of Sony Pictures in 2011.
Altsbit had only launched as a rebranded service (though it's not clear what it had rebranded from) in October, offering a "roadmap" that comprised a brief list of objectives with "Adding user security functions" coming in last as item number five.
Edit (12:58 UTC, Feb. 10 2020): Added statement from LulzSec. (08:20, Feb. 11, 2020) Corrected conversion of bitcoin and ether value.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.