More

    WazirX finds no evidence of compromised devices, blames Liminal security

    WazirX said its preliminary investigation found no evidence indicating that the machines of WazirX signers were compromised during a recent sophisticated cyber attack on its multi-signature Ethereum wallet, according to a July 25 blog post,

    The attack, which occurred earlier this month, has prompted significant concern and scrutiny within the crypto community. The exchange initially said the hack occurred due to an issue with its custody service provider, Liminal’s user interface.

    However, Liminal said in its July 19 investigation report its infrastructure was not responsible for the hack and that compromised hardware wallets were the most likely cause.

    WazirX investigation

    WazirX emphasized that its ongoing forensic analysis has not uncovered any signs of malware or tampering on their signers’ devices. The attacked wallet required the signatures of three WazirX signers and one from Liminal, a custody service provider.

    The malicious transactions were signed using devices at different locations, each accessing the legitimate Liminal website. The hardware wallets, crucial in securing transactions, did not detect any new connection requests, indicating the website used was authentic.

    Despite the rigorous security measures in place, the attack involved legitimate signatures. The exchange believes this points to a potential breach within Liminal’s system. Furthermore, it said that even if the hardware wallets were compromised, Liminal’s fourth signature was the final “line of defense.”

    WazirX outlined two possible scenarios that could explain the breach:

    Breach within Liminal’s Infrastructure: Malicious transactions were received directly from Liminal due to a potential compromise of their system. This scenario is currently considered more likely due to the absence of new connection requests to hardware wallets and the use of whitelisted addresses.
    Compromise of WazirX Signers’ Devices: This scenario involves malware infecting the devices of WazirX signers, although no preliminary evidence has been found to support this. It would also require a breach of Liminal’s firewall to obtain the final signature.

    The exchange emphasized that the malicious transactions did not originate from WazirX servers, which points to a potential breach of Liminal’s security.

    The hack

    The India-based crypto exchange suffered the catastrophic hack on July 18. The attacker stole roughly 45% of the crypto it held, forcing it to halt operations. WazirX said that the hack only affected its multi-sig wallet and assured users that their fiat currency deposits remained safe.

    The exchange said it is working with all relevant authorities and plans to resume services once a viable solution is found. It’s currently discussing possible partnerships that would allow it to make customers whole.

    Cybersecurity experts have suggested the involvement of the notorious North Korean Lazarus Group, known for its advanced cyber attacks on financial institutions and crypto exchanges.

    The incident highlights the evolving challenges of securing multi-signature wallets, particularly the risks associated with “blind signing,” where hardware wallets do not display transaction details.

    WazirX said it had implemented industry-standard best practices, including verifying website URLs, using reputable platforms, and employing multi-factor authentication.

    The post WazirX finds no evidence of compromised devices, blames Liminal security appeared first on CryptoSlate.

    Related articles

    How AI is Driving Data Center Growth in India

    How AI is Driving Data Center Growth in India India is rapidly advancing its data center infrastructure to support the increasing demands of Artificial Intelligence (AI), especially as AI applications continue to grow across sectors...

    Why Ethereum Could Outpace Bitcoin Soon? Raoul Pal Highlights Top Factors

    The post Why Ethereum Could Outpace Bitcoin Soon? Raoul Pal Highlights Top Factors appeared first on Coinpedia Fintech News Both Bitcoin and Ethereum have experienced impressive growth in the last 30 days. The Bitcoin market...

    Crypto Price LIVE (Nov 8th, 2024): Cardano and Neiro Lead Top Gainers!

    The post Crypto Price LIVE (Nov 8th, 2024): Cardano and Neiro Lead Top Gainers! appeared first on Coinpedia Fintech News The cryptocurrency market cap has declined by 0.82% over the last 24 hours, settling at...

    Detroit Crypto Payment: Paying Taxes in Crypto Just Got Real

    The post Detroit Crypto Payment: Paying Taxes in Crypto Just Got Real appeared first on Coinpedia Fintech News Detroit’s got something different in store for 2025: it’s letting residents pay taxes and fees in cryptocurrency....

    Dean Skurka, CEO of Crypto Company WonderFi, Kidnapped in Toronto

    The post Dean Skurka, CEO of Crypto Company WonderFi, Kidnapped in Toronto appeared first on Coinpedia Fintech News In an event that shocked the crypto space, the CEO of WonderFi- a Canada crypto leader firm...

    Latest articles

    LEAVE A REPLY

    Please enter your comment!
    Please enter your name here