A NullMeridian record Andromeda Logs

NullMeridianLog

12 Sep 2023

CoinEx: Hot-Wallet Private Key Leak, Multi-Chain Outflows

CoinEx: on 12 Sep 2023 anomalous hot-wallet withdrawals were detected. Cause preliminarily determined as hot-wallet private key leakage. Cold wallets unaffected; foundation bears losses.

  • Event date
  • Incident typeExchange hot-wallet compromise
  • Bug classKey compromise
  • Published

Loss, as sourced

Per CoinEx table: includes 231 BTC, 4,953 ETH, 135,600 SOL, 12,625,364 XRP, 29,552 BNB, among others. Cold wallets unaffected.

Traceability

Primary sources

  1. 01coinex.comCoinEx progress notice, 14 Sep 2023 (updated) (opens in a new tab)

In brief

Root cause: Per CoinEx: preliminary determination — leakage of the hot wallet private key.

Timeline, as sourced: 12 Sep detection and shutdown; 14 Sep asset disclosure; 21 Sep major assets resumed with new addresses.

Account, as sourced

Claimed (CoinEx) (notice (opens in a new tab)): User Asset Security Foundation bears losses.

Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.

Permalinkhttps://andromeda.observer/e/coinex-hot-wallet-key-leak-2023