Loading market data…
Live
Bitcoin News

Liquid warm wallet hack report

Twitter / XTelegram

First Update 19-Aug-2021  

iquid’s Operations and Technology teams detected unauthorized access of some of the crypto wallets managed at Liquid.

Status of Liquid Services

  • To ensure safety of funds, please do not deposit any crypto assets to your Liquid wallets until further notice.
  • Liquid has halted all crypto withdrawals while we assess the impact.
  • Fiat withdrawals and deposits remain available.
  • Other services on Liquid, including trading and Liquid Earn, remain available.

Impact

The analysis of the impact is ongoing and is subject to change. Thus far we have determined the following data points:

  • A total of approximately 91.35mm USDe of crypto assets were moved out of Liquid wallets by an unauthorized party.
    • Of this amount, 16.13mm USDe of ERC-20 assets have been frozen (disabled for onchain movement) due to the assistance of the crypto community and other exchanges.
  • 69 different crypto assets were misappropriated and sent to other exchanges or defi swapping venues.
  • Assets placed in Liquid Earn are not impacted.

Liquid’s teams are still assessing the attack vector used and taking measures to mitigate the impact to users.

More information will be provided as it becomes available via Liquid Help Center & Liquid Global Twitter.

During this difficult period we greatly appreciate the support from our customers, other exchanges, security experts, and the broader crypto community.  Liquid will continue to do everything in its power to mitigate the impact from this incident and restore full service as soon as possible.

These are the list of known addresses used by the un-authorised party:

Currency Wallet Address
BTC 1Fx1bhbCwp5LU2gHxfRNiSHi1QSHwZLf7q
ETH/ERC-20 0x5578840aae68682a9779623fa9e8714802b59946
ETH 0x8762db106b2c2a0bccb3a80d1ed41273552616e8
ETH 0xefb33ccafc98d5fdb27a6f5ff17350ca76bf3b53
ETH 0xca0e7269600d353f70b14ad118a49575455c0f2f
TRX TSpcue3bDfZNTP1CutrRrDxRPeEvWhuXbp
XRP rfapBqj7rUkGju7oHTwBwhEyXgwkEM4yby
  Subsequent Movement Traced
BTC 12PKkwoFkXp6JtN7roWRA2gSitE6nVDds4
BTC 1JW1tcBXp1vZ6KGEirFNSXb5RgZSaL63Av
ERC20 0xff0f573bdf4c23e41ea3ecd82efa66828706b711
ERC20 0x5d8ecef85058b33cc7130b975cfe07b548fee50a
ERC20 0xD66D9EC7f0D89E0E6698953a7f44158552fbaf8f
ERC20 0x262feb0550F3b6927ee5CBaa2fcfF77c1D270dbe
ERC20 0xec06a00df7fe291c9f872449385bd593e38d8133
ERC20 0xaf9bdc92c920415cbcb8572a2dcb8aade778312b
ERC20 0xD66D9EC7f0D89E0E6698953a7f44158552fbaf8f

The following assets were moved from Liquid’s compromised warm wallets:

Currency Amount (token units)
1WO 422,234.47
AAVE 226.12
ALBT 1,864,427.82
AMLT 2,626,879.51
AMN 5,604,056.42
ANCT 10,096,863.10
BAAS 10,023,709.46
BAT 4,465.33
BFC 1,063,271.82
BIFI 142,993.29
BTC 57.71
CEL 804,775.54
COT 43,179,685.23
CRPT 416,030.51
DAI 156,458.44
DENT 7,827,882.54
DREAM 41,189.77
ENJ 54,750.41
ETH 9,536.13
EWT 483,158.00
FLIXX 3,951,233.43
FLP 1,981,736.75
FSN 90,579.41
FTX 1,219,995.16
GET 190,806.41
GOM2 1,635,175.00
GYEN 61,261,530.21
GZE 760,511.43
IDRT 1,604,850,918.37
ILK 100,191,837.81
IND 818,199.76
KRL 2,127,152.44
LCX 44,147,506.05
LINK 12,978.05
LND 3,216,461.32
LPT 904.4
LTX 217,757.60
MCO 1,373.10
MITX 2,103,607.28
MKR 4.88
MTN 1,269,920.54
MVL 4,392,174.87
NII 40,561,885.60
ONG 452,195.30
PPP 1,398,803.82
QASH 1,829,927.49
QBZ 5,158,115.56
REN 22,788.62
RFOX 44,379,216.85
ROOBEE 6,148,058.40
RSR 5,642,243.30
RSV 81,470.73
SAND 1,773,946.06
SNX 44,568.25
SPDR 3,009,229.82
TON 19,125.99
TRX 2,600,933.17
UBT 288,435.82
UNI 2,481.15
USDC 2,408,963.25
USDT 5,258,223.01
VI 256,230.48
VIDY 25,496,397.94
WABI 149,216.96
WOM 182,020.00
XNO 49,192,867.48
XRP 10,912,233.00
XSGD 639,843.46
ZUSD 299,805.48