Japan's Liquid Global Exchange Hacked; $90M in Crypto Siphoned Off

While the total amount stolen is yet to be determined, the value taken could be upward of $90 million.

AccessTimeIconAug 19, 2021 at 4:31 a.m. UTC
Updated Sep 14, 2021 at 1:42 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

Japan's Liquid Global exchange said it has been hacked, and has suspended deposits and withdrawals.

  • According to a tweet on Thursday, the exchange said its warm wallets were compromised and that it was moving digital assets offline.
  • While the total amount stolen has yet to be determined, the value taken in bitcoin, ether, ripple, tron, and others could be upward of $90 million, Eddie Wang, senior researcher at OKLink, told CoinDesk.
  • "We are currently investigating and will provide regular updates," the exchange said in the tweet. "In the meantime, deposits and withdrawals will be suspended."
  • In a later tweet, Liquid Global said it's working with other exchanges to freeze the funds.
  • Crypto exchange KuCoin's CEO, Johnny Lyu, said his platform was aware of the incident and had blacklisted the hacker's wallet addresses. Other exchanges are likely to follow suit.
  • So far, it has revealed nine wallet addresses where the hacker is depositing heisted funds.
  • One of the addresses Liquid Global revealed was still receiving bitcoin at 7:20 UTC
  • In a blog post on the incident, translated from the Japanese by Google, Liquid Global claimed the hack targeted a multi-party computation (MPC) wallet. "This time, the MPC wallet (used for warehousing / delivery management of cryptographic assets) used by our Singapore subsidiary QUOINE PTE was damaged by hacking." the company said.
  • MPC is an advanced cryptographic technique in which the private key controlling funds is generated collectively by a set of parties, none of whom can see the fragments calculated by the others. Liquid Global's blog post did not explain how this security arrangement was circumvented.
  • Liquid Global is unrelated to the Liquid Network, the sidechain, or parallel system, to Bitcoin created by tech startup Blockstream.

UPDATE (AUG. 19, 7:59 UTC): Adds Liquid Global is working with other exchanges; updates number of destination addresses.

UPDATE (AUG. 19, 8:37 UTC): Updates value taken.

UPDATE (AUG. 19, 13:45 UTC): Adds detail from Liquid Global's explanation of hack.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.