News linked to both this project and an event.
According to Odaily monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing multiple recent digital asset security risks. Attackers impersonated [email protected] to trick users into downloading remote control programs. GCSA found that the relevant domain had not previously been configured with DMARC; after notification, KuCoin has completed remediation and enabled a DMARC quarantine policy. After the original version of the MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. Installation methods without pinned versions and the risk of plaintext keys may lead to credential leakage. There is currently no evidence of actual theft, and Bitkub has not yet responded to the notification. Within the Avalanche ecosystem, the TranchePool vault was attacked due to a flaw in its cross-day settlement logic. The attacker exploited flash loans and repeated withdrawals to transfer out approximately 1.0134 million USDC within 202 seconds. This incident is an upper-layer application vulnerability, and the underlying network was not affected. GCSA stated that it has reported the leads to the relevant platforms and published the original analysis and evidence for industry reference.
Odaily News: The Thai Securities and Exchange Commission (SEC) has filed a criminal complaint against cryptocurrency exchange Bitkub Online and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, accusing them of submitting false financial reports between May and October 2021. The case has been referred to the Thai Economic Crime Suppression Division (ECD) for investigation, and prosecutors will determine whether to formally indict. The SEC stated that Bitkub suffered a cyberattack in May 2021, resulting in the theft of 16 types of digital assets, with losses exceeding $50 million. Regulatory investigations revealed that Bitkub failed to reflect the related losses in its Form DA 1 daily net capital reports from May 10 to October 30, 2021. The SEC alleges that the involved executives made false entries in the company's official documents, leading regulators to believe that client assets were intact and the company had not suffered financial losses. Bitkub subsequently completed the acquisition of replacement assets in late October 2021, but the SEC maintains that the reports during that period constituted false statements. In a statement on July 23, Bitkub stated that current customer holdings were secure and accounts were complete. Bitkub claimed that its co-founders purchased replacement assets of the same type and quantity, bearing the losses themselves, and noted that the cyber theft incident had been reported to law enforcement authorities on May 10, 2021.
According to The Nation Thailand, the Thai Securities and Exchange Commission has filed a criminal complaint with the Economic Crime Suppression Division against digital asset exchange Bitkub and its two former directors, alleging false statements in daily net capital reports submitted after the 2021 hacking incident. The incident resulted in the theft of approximately 1.7 billion baht worth of digital assets. The regulator believes that Bitkub failed to accurately reflect asset losses and related changes during the period from May to October 2021.