Liquid Warm Wallet Incident Report

In Announcements

24th Update 16-Sep-2021

We have resumed deposits and withdrawals for the below cryptocurrencies today (16 Sep 2021):

Resumption Date

Currency

16.09.2021

NII

16.09.2021

VIDY

16.09.2021

AMN

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.

Click here to learn how to generate a new deposit address.

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



23rd Update
14-Sep-2021

We have resumed deposits and withdrawals for the below cryptocurrencies today (14 Sep 2021):

Resumption Date

Currency

14.09.2021

WOM

14.09.2021

GZE

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.

Click here to learn how to generate a new deposit address.

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



22nd Update
13-Sep-2021

We have resumed deposits and withdrawals for the below cryptocurrencies today (13 Sep 2021):

Resumption Date

Currency

11.09.2021

LTX

13.09.2021

WABI

13.09.2021

GATE

13.09.2021

FCT

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.

Click here to learn how to generate a new deposit address.

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



21st Update
10-Sep-2021

We have resumed deposits and withdrawals for the below cryptocurrencies today (10 Sep 2021):

Resumption Date

Currency

10.09.2021

BFC

10.09.2021

COMP

10.09.2021

ANCT

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.

Click here to learn how to generate a new deposit address.

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



20th Update
9-Sep-2021

We have resumed deposits and withdrawals for the below cryptocurrencies today (9 Sep 2021):

Resumption Date

Currency

09.09.2021

MVL

09.09.2021

SAND

09.09.2021

XNO

09.09.2021

ROOBEE

09.09.2021

PPP

09.09.2021

DREAM

09.09.2021

FTX

09.09.2021

KMD

09.09.2021

XEM

09.09.2021

QTUM

09.09.2021

XPT

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.

Click here to learn how to generate a new deposit address.

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



19th Update
8-Sep-2021

The gradual resumption of crypto deposits and withdrawal services continues. 

FIO address services are back to being operational. You can use your FIO address for sending and receiving cryptocurrency. 

All your previously linked assets have been automatically mapped to your FIO address, excluding QTUM, XEM, KMD, ETN, and some delisted tokens. These need to be manually remapped. Learn more in our recent help centre article

What is FIO? Read our article to find out. 

We have resumed deposits and withdrawals for the below cryptocurrencies today (8 Sep 2021):

Resumption Date

Currency

08.09.2021

GOM2

08.09.2021

DEXA

08.09.2021

DIA

08.09.2021

ALBT

08.09.2021

UBT

08.09.2021

STAC

08.09.2021

MTL

08.09.2021

KSM

08.09.2021

EWT

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution.

Click here to learn how to generate a new deposit address.

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



18th Update
7-Sep-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (7 Sep 2021):

Resumption Date

Currency

07.09.2021

ENJ

07.09.2021

AAVE

07.09.2021

1WO

07.09.2021

FLIXX

07.09.2021

BIFI

07.09.2021

NDAU

07.09.2021

CRT

07.09.2021

LPT

07.09.2021

MKR

07.09.2021

TPAY (Withdrawal only)

07.09.2021

TFT

07.09.2021

REN

07.09.2021

FIO

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



17th Update
6-Sep-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (6 Sep 2021):

Resumption Date

Currency

06.09.2021

BAT

06.09.2021

ILK

06.09.2021

GUSD

06.09.2021

OMG

06.09.2021

KRL

06.09.2021

CHI

06.09.2021

BTCV

06.09.2021

DAG

06.09.2021

ETN

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



16th Update
3-Sep-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (3 Sep 2021):

Resumption Date

Currency

03.09.2021

SPDR

03.09.2021

ZUSD

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



15th Update
2-Sep-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (2 Sep 2021):

Resumption Date

Currency

02.09.2021

XTZ

02.09.2021

USDS

02.09.2021

RSR

02.09.2021

BTRN

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



14th Update
1-Sep-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (1 Sep 2021):

Resumption Date

Currency

01.09.2021

LCX

01.09.2021

XCF

01.09.2021

DOT

01.09.2021

DOGE

01.09.2021

EGLD

01.09.2021

XKI

01.09.2021

ATOM

01.09.2021

ZIL

01.09.2021

XSGD (ZRC-2)

01.09.2021

RIF

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



13th Update
31-Aug-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (31 Aug 2021):

Resumption Date

Currency

31.08.2021

USDT (ERC-20)

31.08.2021

SNX

31.08.2021

DASH

31.08.2021

LINK

31.08.2021

RFOX

31.08.2021

XSGD (ERC-20)

31.08.2021

HBAR

31.08.2021

UNI

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



12th Update
30-Aug-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (30 Aug 2021):

Resumption Date

Currency

30.08.2021

XLM

30.08.2021

BCH

30.08.2021

XRP

30.08.2021

QASH

30.08.2021

ETH

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



11th Update
29-Aug-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (29 Aug 2021):

Resumption Date

Currency

29.08.2021

GYEN

29.08.2021

DAI

29.08.2021

USDC (ERC-20)

29.08.2021

USDC (Stellar)

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



10th Update
28-Aug-2021

The gradual resumption of crypto deposits and withdrawal services continues.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below cryptocurrencies today (28 Aug 2021):

Resumption Date

Currency

28.8.2021

CEL

28.8.2021

XDC

28.8.2021

LTC

For the full list of cryptocurrencies available for deposits and withdrawals, please refer to this link

We will be resuming services for additional cryptocurrencies in the coming days, stay tuned for more updates.



9th Update
27-Aug-2021

We are on track with the gradual resumption of crypto deposits and withdrawal services. 

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. 

How to generate new wallet addresses? Please refer to this guide.

We have resumed deposits and withdrawals for the below cryptocurrency today (27 Aug 2021):

Resumption Date

Currency

27.8.2021

BTC

For the full list of available cryptocurrencies for deposits and withdrawals please refer to this link

We will be resuming services for more cryptocurrencies in the coming days and will publish the schedule on our social media.


Note: We are aware of a bug that doesn’t allow users to generate a new deposit address for USDT (TRC-20) on our mobile apps. While we work on a fix for this, please visit this link from your web browser to create a new deposit address for USDT (TRC-20) in the interim.



8th
Update
26-Aug-2021  

We would like to announce the start of the gradual resumption of crypto deposit and withdrawal services on Liquid. Our main priority was to make certain we resumed in a safe and secure manner, and we appreciate your patience in this regard.

We want to reiterate that users should generate new deposit wallet addresses before transacting. The deposit addresses for all currencies are being changed as a security precaution. 

If you have Liquid wallet address(es) whitelisted/saved on another exchange or wallet, please ensure to change it to avoid depositing to the wrong address.

Click here to learn how to generate a new deposit address.

We have resumed deposits and withdrawals for the below digital assets today (26 Aug 2021):

Resumption Date

Currency

26.8.2021

TRX

26.8.2021

VIDYX

26.8.2021

USDT (TRC-20)

26.8.2021

KLAY

26.8.2021

MNR

26.8.2021

SSX

26.8.2021

RBTC

We would also like to apologize for halting deposit and withdrawal services for the last week; this was done with an abundance of caution to ensure that our infrastructure was secure and no further unauthorized access was gained.

Further updates will be shared on this blog and our Twitter.

 



7th Update
25-Aug-2021  

We want to reassure our users that they will not suffer any loss due to the incident that took place on the 19th of August. There will be no impact on user balances at Liquid. 

We continue to work diligently to gradually restore crypto deposit and withdrawal services.

As always, further details will be shared on our blog and Twitter.



6th Update
24-Aug-2021  

We have begun the gradual rollout of service resumption across our platform.
Our QuickExchange service resumed on Monday, allowing users to once again conveniently buy and swap cryptocurrency with their card in an instant. 

Our Liquid Earn services remained ongoing during the incident management, and rewards were paid out in a timely manner today. 

As previously mentioned, we will continue the gradual resumption of other services in the days to come. All updates regarding the resumption will be posted on our blog and Twitter.

We would also like to reassure our customers that personal data was not compromised in any manner during the incident. 

While continuing our investigation, we have identified additional addresses used by the unauthorized party. However, we have been advised to not publicly disclose the ongoing tracking activities at this point in time.

Stay tuned for more updates.

 



5th Update 23-Aug-2021  

Service Update:

The process of testing and migrating our assets to the new MPC vaults is still underway. Additionally, we are liaising with external vendors to validate the security of the infrastructure further.

As detailed in our previous updates, we are still on track to resume our cryptocurrency withdrawal and deposit services. Service resumption will be done in a staggered approach, and we will update the details of the timings for each cryptocurrency in our blog and Twitter.

We would like to stress that users should verify their deposit wallet addresses before transacting. The deposit addresses for most currencies are being changed as a security precaution. 

Fiat deposits and withdrawals continue to operate as per usual - with no change in service.

We are planning to resume new token listings to operate as usual starting 30th of August.

Investigation Update:

On the day of the attack, we identified the attack vector used to gain unauthorized access to our MPC wallets, at which point we immediately resolved the breach.

Deeper investigation into the attack and the identification of the responsible parties is ongoing. We are in contact with the relevant authorities in both Japan and Singapore regarding this incident.

--

We truly appreciate the outpouring support from our clients, customers, partners, and the broader crypto community as we continue to work through this challenging time.

 



4th Update 22-Aug-2021  

We continued our investigation throughout the weekend. We are still in the process of testing and migrating our assets to the new secure vaults. We are still expecting to restore services gradually early next week.

So far, we became aware of nine more addresses by the unauthorized party. We will be continuing to monitor the movement of funds with the support of other exchanges and partners. Please be aware of the addresses below: 

Currency

Wallet Address

ERC20 0x11cf04ee89c9ef56d9ef6126e914286770b8571f
ERC20 0x5D2C9f717Da427a9c8Cc20c44EA57BA61d5bc457
ERC20 0xF87694E29C55D8B971c851ed5936eaC65BAbFbC1
ERC20 0xc4af9d67850ed5523b876b2276656170689162ce
BTC 1KNkqryYzeCX36qGhREAsCenowSQqZaKuf
BTC 1BuEFBns18qmG73ZAA9Pz3f2cWB6UiihuB
BTC 14Gm6XdWuRPetSsgktkiBWFMfaMqxrKfGn
BTC 158khNHxJksxCmWKitms8sATHJpmpzFRtS
BTC 13Vsw6YXm6e4zpj48y3orV1rHtd3A42Xzg

 


 

3rd Update 21-Aug-2021  

We would like to once again thank our community for your continued support while we take measures on mitigating this incident. 

We have completed setting up our new MPC infrastructure with heightened security, and are now in the process of testing and migrating our assets to the new secure vaults. We expect to restore services early next week.

As mentioned in our previous updates, we are continuing to work with the appropriate authorities and taking the necessary action required in this avenue. 

We will continue to update the latest developments on this blog and our Twitter.



2nd Update 20-Aug-2021
  

Thank you to our users and the broader crypto community for your continued patience.

After over 24 hours since the incident, we would like to share a few more updates: 

We are developing and surfacing more information about the incident to manage; while currently re-building our MPC infrastructure to ensure maximum security.

The team is continuing to conduct thorough security scans and tests over the next couple of days, and we expect to restore all services early next week.

We will also be working with the appropriate authorities and taking the necessary action required in this avenue. 

Our token issuers have effectively frozen approximately 17.4mm USDe of ERC-20 tokens. We will be continuing to collaborate with our partners to improve this value.

 



1st Update 19-Aug-2021  

At roughly 7:50 AM SGT on August 19th, Liquid’s Operations and Technology teams detected unauthorized access of some of the crypto wallets managed at Liquid.

Status of Liquid Services

  • To ensure safety of funds, please do not deposit any crypto assets to your Liquid wallets until further notice.
  • Liquid has halted all crypto withdrawals while we assess the impact.
  • Fiat withdrawals and deposits remain available.
  • Other services on Liquid, including trading and Liquid Earn, remain available.

Impact

The analysis of the impact is ongoing and is subject to change. Thus far we have determined the following data points:

  • A total of approximately 91.35mm USDe of crypto assets were moved out of Liquid wallets by an unauthorized party.
    • Of this amount, 16.13mm USDe of ERC-20 assets have been frozen (disabled for onchain movement) due to the assistance of the crypto community and other exchanges.
  • 69 different crypto assets were misappropriated and sent to other exchanges or DeFi swapping venues.
  • Assets placed in Liquid Earn are not impacted.

Liquid’s teams are still assessing the attack vector used and taking measures to mitigate the impact to users.

More information will be provided as it becomes available via Liquid Help Center & Liquid Global Twitter.

During this difficult period we greatly appreciate the support from our customers, other exchanges, security experts, and the broader crypto community.  Liquid will continue to do everything in its power to mitigate the impact from this incident and restore full service as soon as possible.

These are the list of known addresses used by the un-authorised party:

Currency

Wallet Address

BTC

1Fx1bhbCwp5LU2gHxfRNiSHi1QSHwZLf7q

ETH/ERC-20

0x5578840aae68682a9779623fa9e8714802b59946

ETH

0xefb33ccafc98d5fdb27a6f5ff17350ca76bf3b53

TRX

TSpcue3bDfZNTP1CutrRrDxRPeEvWhuXbp

XRP

rfapBqj7rUkGju7oHTwBwhEyXgwkEM4yby

 

Subsequent Movement Traced

BTC

12PKkwoFkXp6JtN7roWRA2gSitE6nVDds4

BTC

1JW1tcBXp1vZ6KGEirFNSXb5RgZSaL63Av

ERC20

0xff0f573bdf4c23e41ea3ecd82efa66828706b711

ERC20

0x5d8ecef85058b33cc7130b975cfe07b548fee50a

ERC20

0xD66D9EC7f0D89E0E6698953a7f44158552fbaf8f

ERC20

0x262feb0550F3b6927ee5CBaa2fcfF77c1D270dbe

ERC20

0xec06a00df7fe291c9f872449385bd593e38d8133

ERC20

0xaf9bdc92c920415cbcb8572a2dcb8aade778312b

The following assets were moved from Liquid’s compromised warm wallets:

Currency

Amount (token units)

1WO

422,234.47

AAVE

226.12

ALBT

1,864,427.82

AMLT

2,626,879.51

AMN

5,604,056.42

ANCT

10,096,863.10

BAAS

10,023,709.46

BAT

4,465.33

BFC

1,063,271.82

BIFI

142,993.29

BTC

57.82

BTRN

57,023,772.26

CEL

804,775.54

COT

43,179,685.23

CRPT

554,837.55

DACS

49,190,581.67

DAI

156,458.44

DENT

7,827,882.54

DREAM

41,189.77

ENJ

54,750.41

ETH

9,536.13

EWT

483,158.00

FLIXX

3,951,233.43

FLP

1,981,736.75

FSN

90,579.41

FTX

1,219,995.16

GET

190,806.41

GOM2

1,635,175.00

GYEN

61,261,530.21

GZE

760,511.43

IDRT

1,604,850,918.37

ILK

100,191,837.81

IND

818,199.76

KRL

2,127,152.44

LCX

44,147,506.05

LINK

12,978.05

LND

3,216,461.32

LPT

904.4

LTX

217,757.60

MCO

1,373.10

MITX

2,103,607.28

MKR

4.88

MTN

1,269,920.54

MVL

4,392,174.87

NII

40,561,885.60

ONG

452,195.30

PPP

1,398,803.82

QASH

1,829,927.49

QBZ

5,158,115.56

REN

22,788.62

RFOX

44,379,216.85

ROOBEE

6,148,058.40

RSR

5,642,243.30

RSV

81,470.73

SAND

1,773,946.06

SNX

44,568.25

SPDR

3,009,229.82

THRT

14,449,705.39

TON

19,125.99

TRX

2,600,933.17

UBT

306,777.11

UNI

3,646.15

USDC

2,408,963.25

USDT

5,258,223.01

VI

256,230.48

VIDY

25,496,397.94

WABI

149,216.96

WOM

182,020.00

XNO

49,192,867.48

XRP

10,912,233.00

XSGD

639,843.46

ZUSD

299,805.48

All guest authors’ opinions are their own. Liquid does not endorse or adopt any such opinions, and we cannot guarantee any claims made in content written by guest authors.

This content is not financial advice and it is not a recommendation to buy or sell any cryptocurrency or engage in any trading or other activities. You must not rely on this content for any financial decisions. Acquiring, trading, and otherwise transacting with cryptocurrency involves significant risks. We strongly advise our readers to conduct their own independent research before engaging in any such activities.

Liquid does not guarantee or imply that any cryptocurrency or activity described in this content is available or legal in any specific reader’s location. It is the reader’s responsibility to know the applicable laws in his or her own country.

WRITTEN BY

Liquid

Providing liquidity for the crypto economy.