- Indodax, an Indonesian cryptocurrency exchange, suffered a security breach resulting in a loss of over $18 million.
- Analysts from PeckShield and Cyvers identified significant crypto outflows from Indodax wallets.
- The stolen assets included 5204 ETH, 6.84 million Polygon (POL), and 380 ETH on separate networks.
- Indodax confirmed potential security issues and is conducting comprehensive maintenance to ensure system integrity.
- The company assured clients that their funds remain 100% secure in both cryptocurrencies and rupiah.
- Similar incidents have occurred recently, including a $235 million hack on the Indian exchange WazirX.
Indonesian Exchange Indodax Hacked for Over $18 Million
On September 11, 2024, the Indonesian cryptocurrency exchange Indodax experienced a significant security breach. According to experts from PeckShield, a notable expulsion of cryptocurrencies amounting to approximately $15.7 million was detected from the exchange’s wallets.
Further analysis revealed that the compromised assets included 5204 ETH on the Ethereum network, 6.84 million Polygon (POL), and around 380 ETH on the Optimism network. The Cyvers team also reported the incident, highlighting suspicious transactions and subsequent token swaps to Ethereum by the alleged attacker.
Details of the Exploit
ALERTHey @indodax, Our system has detected multiple suspicious transactions involving your wallets on different networks. Suspicious address already holds 14.4 million USD and swapping the tokens to Ether. Want to keep your company off our alerts radar? Learn how to secure… pic.twitter.com/Lzpi5uthXS— Cyvers Alerts (@CyversAlerts) September 10, 2024
The specialists at Cyvers identified over 150 transfers linked to this exploit. Their estimated total loss stands at $18.2 million. Indodax has acknowledged these potential security issues and is actively conducting a thorough technical maintenance procedure to ensure all systems function correctly.
Company’s Assurance
Halo Member INDODAX, Kami ingin menginformasikan bahwa team security kami menemukan potensi indikasi keamanan pada platform kami. Saat ini, kami sedang melakukan pemeliharaan menyeluruh untuk memastikan seluruh sistem beroperasi dengan baik. Selama proses pemeliharaan ini,… pic.twitter.com/kYAc6ilERF— indodax (@indodax) September 11, 2024
Indodax has assured its clients that their funds are “100% protected” in both cryptocurrencies and rupiah. During the maintenance process, the Indodax website and app will be temporarily unavailable to ensure the platform’s security and functionality.
Wider Implications
This incident echoes a similar hack in July 2024, where the Indian cryptocurrency exchange WazirX was compromised for $235 million. The perpetrators later laundered part of the stolen funds through the crypto mixer Tornado Cash.
Such breaches highlight the ongoing vulnerabilities within the cryptocurrency space, emphasizing the need for robust security measures. Exchanges must continually upgrade their defenses to safeguard assets and maintain user trust.
In summary, while Indodax’s proactive approach to securing their platform is commendable, the incident underscores the critical importance of cybersecurity in the rapidly evolving world of cryptocurrency. This breach serves as a reminder for all exchanges to prioritize and invest in comprehensive security protocols to protect their users’ assets.
