Liquid Warm Wallet Incident Report

Final Update We are happy to announce that all deposit and withdrawal services have resumed 100% operations. We would like to once again thank our clients, customers, partners, and the broader crypto community for your support during this period; we look forward to returning to BAU.   26th Update 27-Sep-2021 We have resumed deposits and withdrawals for the below cryptocurrencies today (27 Sep 2021): Resumption Date Currency 27.09.2021 BAAS 27.09.2021 IDRT For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 25th Update 20-Sep-2021 We have resumed deposits and withdrawals for the below cryptocurrencies today (20 Sep 2021): Resumption Date Currency 20.09.2021 GET 20.09.2021 CRPT 20.09.2021 SIX 20.09.2021 MTC 20.09.2021 LIKE For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 24th Update 16-Sep-2021 We have resumed deposits and withdrawals for the below cryptocurrencies today (16 Sep 2021): Resumption Date Currency 16.09.2021 NII 16.09.2021 VIDY 16.09.2021 AMN For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 23rd Update 14-Sep-2021 We have resumed deposits and withdrawals for the below cryptocurrencies today (14 Sep 2021): Resumption Date Currency 14.09.2021 WOM 14.09.2021 GZE For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 22nd Update 13-Sep-2021 We have resumed deposits and withdrawals for the below cryptocurrencies today (13 Sep 2021): Resumption Date Currency 11.09.2021 LTX 13.09.2021 WABI 13.09.2021 GATE 13.09.2021 FCT For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 21st Update 10-Sep-2021 We have resumed deposits and withdrawals for the below cryptocurrencies today (10 Sep 2021): Resumption Date Currency 10.09.2021 BFC 10.09.2021 COMP 10.09.2021 ANCT For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 20th Update 9-Sep-2021 We have resumed deposits and withdrawals for the below cryptocurrencies today (9 Sep 2021): Resumption Date Currency 09.09.2021 MVL 09.09.2021 SAND 09.09.2021 XNO 09.09.2021 ROOBEE 09.09.2021 PPP 09.09.2021 DREAM 09.09.2021 FTX 09.09.2021 KMD 09.09.2021 XEM 09.09.2021 QTUM 09.09.2021 XPT For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 19th Update 8-Sep-2021 The gradual resumption of crypto deposits and withdrawal services continues.  FIO address services are back to being operational. You can use your FIO address for sending and receiving cryptocurrency.  All your previously linked assets have been automatically mapped to your FIO address, excluding QTUM, XEM, KMD, ETN, and some delisted tokens. These need to be manually remapped. Learn more in our recent help centre article.  What is FIO? Read our article to find out.  We have resumed deposits and withdrawals for the below cryptocurrencies today (8 Sep 2021): Resumption Date Currency 08.09.2021 GOM2 08.09.2021 DEXA 08.09.2021 DIA 08.09.2021 ALBT 08.09.2021 UBT 08.09.2021 STAC 08.09.2021 MTL 08.09.2021 KSM 08.09.2021 EWT For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. Click here to learn how to generate a new deposit address. We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 18th Update 7-Sep-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (7 Sep 2021): Resumption Date Currency 07.09.2021 ENJ 07.09.2021 AAVE 07.09.2021 1WO 07.09.2021 FLIXX 07.09.2021 BIFI 07.09.2021 NDAU 07.09.2021 CRT 07.09.2021 LPT 07.09.2021 MKR 07.09.2021 TPAY (Withdrawal only) 07.09.2021 TFT 07.09.2021 REN 07.09.2021 FIO For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 17th Update 6-Sep-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (6 Sep 2021): Resumption Date Currency 06.09.2021 BAT 06.09.2021 ILK 06.09.2021 GUSD 06.09.2021 OMG 06.09.2021 KRL 06.09.2021 CHI 06.09.2021 BTCV 06.09.2021 DAG 06.09.2021 ETN For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 16th Update 3-Sep-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (3 Sep 2021): Resumption Date Currency 03.09.2021 SPDR 03.09.2021 ZUSD For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 15th Update 2-Sep-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (2 Sep 2021): Resumption Date Currency 02.09.2021 XTZ 02.09.2021 USDS 02.09.2021 RSR 02.09.2021 BTRN For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 14th Update 1-Sep-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (1 Sep 2021): Resumption Date Currency 01.09.2021 LCX 01.09.2021 XCF 01.09.2021 DOT 01.09.2021 DOGE 01.09.2021 EGLD 01.09.2021 XKI 01.09.2021 ATOM 01.09.2021 ZIL 01.09.2021 XSGD (ZRC-2) 01.09.2021 RIF For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 13th Update 31-Aug-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (31 Aug 2021): Resumption Date Currency 31.08.2021 USDT (ERC-20) 31.08.2021 SNX 31.08.2021 DASH 31.08.2021 LINK 31.08.2021 RFOX 31.08.2021 XSGD (ERC-20) 31.08.2021 HBAR 31.08.2021 UNI For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 12th Update 30-Aug-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (30 Aug 2021): Resumption Date Currency 30.08.2021 XLM 30.08.2021 BCH 30.08.2021 XRP 30.08.2021 QASH 30.08.2021 ETH For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 11th Update 29-Aug-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (29 Aug 2021): Resumption Date Currency 29.08.2021 GYEN 29.08.2021 DAI 29.08.2021 USDC (ERC-20) 29.08.2021 USDC (Stellar) For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 10th Update 28-Aug-2021 The gradual resumption of crypto deposits and withdrawal services continues. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below cryptocurrencies today (28 Aug 2021): Resumption Date Currency 28.8.2021 CEL 28.8.2021 XDC 28.8.2021 LTC For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link.  We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates. 9th Update 27-Aug-2021 We are on track with the gradual resumption of crypto deposits and withdrawal services.  We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  How to generate new wallet addresses? Please refer to this guide. We have resumed deposits and withdrawals for the below cryptocurrency today (27 Aug 2021): Resumption Date Currency 27.8.2021 BTC For the full list of available cryptocurrencies for deposits and withdrawals please refer to this link.  We will be resuming services for more cryptocurrencies in the coming days and will publish the schedule on our social media. Note: We are aware of a bug that doesn’t allow users to generate a new deposit address for USDT (TRC-20) on our mobile apps. While we work on a fix for this, please visit this link from your web browser to create a new deposit address for USDT (TRC-20) in the interim. 8th Update 26-Aug-2021   We would like to announce the start of the gradual resumption of crypto deposit and withdrawal services on Liquid. Our main priority was to make certain we resumed in a safe and secure manner, and we appreciate your patience in this regard. We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.  If you have Liquid wallet address(es) whitelisted/saved on another exchange or wallet, please ensure to change it to avoid depositing to the wrong address. Click here to learn how to generate a new deposit address. We have resumed deposits and withdrawals for the below digital assets today (26 Aug 2021): Resumption Date Currency 26.8.2021 TRX 26.8.2021 VIDYX 26.8.2021 USDT (TRC-20) 26.8.2021 KLAY 26.8.2021 MNR 26.8.2021 SSX 26.8.2021 RBTC We would also like to apologize for halting deposit and withdrawal services for the last week; this was done with an abundance of caution to ensure that our infrastructure was secure and no further unauthorized access was gained. Further updates will be shared on this blog and our Twitter.   7th Update 25-Aug-2021   We want to reassure our users that they will not suffer any loss due to the incident that took place on the 19th of August. There will be no impact on user balances at Liquid.  We continue to work diligently to gradually restore crypto deposit and withdrawal services. As always, further details will be shared on our blog and Twitter. 6th Update 24-Aug-2021   We have begun the gradual rollout of service resumption across our platform. Our QuickExchange service resumed on Monday, allowing users to once again conveniently buy and swap cryptocurrency with their card in an instant.  Our Liquid Earn services remained ongoing during the incident management, and rewards were paid out in a timely manner today.  As previously mentioned, we will continue the gradual resumption of other services in the days to come. All updates regarding the resumption will be posted on our blog and Twitter. We would also like to reassure our customers that personal data was not compromised in any manner during the incident.  While continuing our investigation, we have identified additional addresses used by the unauthorized party. However, we have been advised to not publicly disclose the ongoing tracking activities at this point in time. Stay tuned for more updates.   5th Update 23-Aug-2021   Service Update: The process of testing and migrating our assets to the new MPC vaults is still underway. Additionally, we are liaising with external vendors to validate the security of the infrastructure further. As detailed in our previous updates, we are still on track to resume our cryptocurrency withdrawal and deposit services. Service resumption will be done in a staggered approach, and we will update the details of the timings for each cryptocurrency in our blog and Twitter. We would like to stress that users should verify their deposit wallet addresses before transacting. The deposit addresses for most currencies are being changed as a security precaution.  Fiat deposits and withdrawals continue to operate as per usual - with no change in service. We are planning to resume new token listings to operate as usual starting 30th of August. Investigation Update: On the day of the attack, we identified the attack vector used to gain unauthorized access to our MPC wallets, at which point we immediately resolved the breach. Deeper investigation into the attack and the identification of the responsible parties is ongoing. We are in contact with the relevant authorities in both Japan and Singapore regarding this incident. -- We truly appreciate the outpouring support from our clients, customers, partners, and the broader crypto community as we continue to work through this challenging time.   4th Update 22-Aug-2021   We continued our investigation throughout the weekend. We are still in the process of testing and migrating our assets to the new secure vaults. We are still expecting to restore services gradually early next week. So far, we became aware of nine more addresses by the unauthorized party. We will be continuing to monitor the movement of funds with the support of other exchanges and partners. Please be aware of the addresses below:  Currency Wallet Address ERC20 0x11cf04ee89c9ef56d9ef6126e914286770b8571f ERC20 0x5D2C9f717Da427a9c8Cc20c44EA57BA61d5bc457 ERC20 0xF87694E29C55D8B971c851ed5936eaC65BAbFbC1 ERC20 0xc4af9d67850ed5523b876b2276656170689162ce BTC 1KNkqryYzeCX36qGhREAsCenowSQqZaKuf BTC 1BuEFBns18qmG73ZAA9Pz3f2cWB6UiihuB BTC 14Gm6XdWuRPetSsgktkiBWFMfaMqxrKfGn BTC 158khNHxJksxCmWKitms8sATHJpmpzFRtS BTC 13Vsw6YXm6e4zpj48y3orV1rHtd3A42Xzg     3rd Update 21-Aug-2021   We would like to once again thank our community for your continued support while we take measures on mitigating this incident.  We have completed setting up our new MPC infrastructure with heightened security, and are now in the process of testing and migrating our assets to the new secure vaults. We expect to restore services early next week. As mentioned in our previous updates, we are continuing to work with the appropriate authorities and taking the necessary action required in this avenue.  We will continue to update the latest developments on this blog and our Twitter. 2nd Update 20-Aug-2021