Draper-Backed Exchange in Lockdown Following 'Sophisticated' Attack

Coinhako has restricted user accounts since last Friday following an "attack," but has not released many details around the incident.

AccessTimeIconFeb 27, 2020 at 7:05 p.m. UTC
Updated Sep 13, 2021 at 12:22 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

Coinhako, a cryptocurrency exchange backed by Tim Draper, has restricted user withdrawals after falling victim to a "sophisticated attack."

The Singapore-based exchange told users Friday that account send functions for cryptocurrencies had been temporarily disabled. Although a spokesperson initially said this was for "network maintenance", the exchange admitted Saturday it had been victim to an attack and that it would impose account restrictions to prevent "unauthorized transactions," until the matter had been fully resolved.

The exchange has not provided further details on the attack's nature, or any information on whether assets were stolen.

"We have detected a sophisticated and coordinated attack on specific Coinhako accounts, and have disabled the send function as a preventive measure," a spokesperson said on the exchange's Telegram channel.

Fewer than 20 Coinhako users are believed to have been directly affected by the attack.

Coinhako's spokesperson said the attack was not a wallet hack and user private keys were not affected.

Launched in 2014, Coinhako is a popular gateway into cryptocurrencies for Singapore traders through its Singapore dollar trading pairs. The exchange launched an over-the-counter desk in October 2019.

Speaking to CoinDesk, Coinhako CEO Yusho Liu said users' send function would remain restricted as a "key countermeasure against unauthorized transaction outflows." The exchange has also reset passwords and two-factor authentication for all users.

Cryptocurrency deposits, trading services and fiat currency withdrawals were still fully functional. Users that had been affected by the attack have also been fully reimbursed, Liu confirmed. The exchange did not respond to questions about the attack's nature.

Coinhako recieved a six-figure personal investment in December 2014 from venture capitalist Tim Draper soon after coming out of Boost VC, the accelerator run by son Adam Draper.

CoinDesk approached Tim Draper for comment, but he had not responded by press time.

Coinhako is scheduled to resume full operational capacity on March 1.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.