Digital assets worth 150 million U.S. dollars were stolen in BitMart security breach • The Register

2021-12-06 20:18:09 By : Ms. Hao Baby

The cryptocurrency exchange BitMart expressed dissatisfaction with the large-scale security breaches related to ETH and BSC hot wallets. The company estimates that hackers stole approximately $150 million in assets.

The security and analysis agency PeckShield estimates this figure is close to 200 million U.S. dollars.

“We discovered today a large-scale security breach related to one of our ETH hot wallets and one of our BSC hot wallets. At this time we are still summarizing the possible methods used. Hackers were able to withdraw approximately US$150 million in value,” BitMart said.

"The affected ETH hot wallet and BSC hot wallet carry a small portion of assets on BitMart. All our other wallets are safe and undamaged. We are now undergoing a thorough security review and we will release it as we progress. Update," it added.

What worries customers is that BitMart has been blocking withdrawals until it completes a "thorough security review," or to use a common analogy, closing the stable door after the horse has finished running.

According to Investopedia, a "hot wallet" is a tool that allows cryptocurrency owners to receive and send tokens. Wallets are used to protect the security of these tokens. Hot wallets are connected to the Internet, while cold wallets do not.

"Because hot wallets are connected to the Internet, they are often more vulnerable to hacking and theft than cold storage methods," BitMart's website says. you think?

BitMart is not alone. Poly Networks revealed in August that some of its systems have been compromised, and criminals have lost hundreds of millions of dollars in digital assets from its platform.

As far as BitMart CEO Sheldon Xia is concerned, he tried to appease nervous customers, saying: "We believe that the deposit and withdrawal function will be gradually activated on December 7, 2021."

Reactions on social media were very diverse. On the one hand, cryptocurrency fans lined up to provide support for this troubled company. On the other hand, the critics come from a group of people facing losses, and a group of people who question why so many assets are stored in hot wallets.

The Register has asked BitMart to comment and will update it when the company responds. ®

Elon Musk’s fans must be frightened this week, because they finally have the opportunity to buy a collectible and slide under the bust of their idol: a document signed by the man himself.

We are not sure what to use as a collective noun for Musk's obsessives. Maybe it's an "illusion"?

In the case of auctions, the items to be auctioned are essays reportedly marked and graded by Musk when he was an assistant professor at the University of Pennsylvania. The future CEO of Tesla brandished a red pen, signed on paper and scored the answers.

The British branch of the Dutch supermarket chain Spar has closed hundreds of stores after suffering an "online attack," the company has confirmed to The Register.

"This has not affected all SPAR stores in northern England," a Spar spokesperson told us. "However, some stores have been affected in the past 24 hours and we are working hard to resolve this situation as quickly as possible."

Lancashire’s local news site LancsLive reported that the chain had experienced a “comprehensive and widespread IT outage” over the weekend, as well as today’s “security breach”.

Interview with Amazon's DocumentDB database service is described by cloud companies as "compatible with MongoDB," but MongoDB Chief Technology Officer Mark Porter told The Register that this is not entirely the case.

You've collected your resignation card, novelty gifts, and maybe a bottle of wine-what's the next step on the list of resigning developers? On the one hand, this is a blog attacking the technology he has been researching for five years.

This is the choice of Steinar Gunderson, former chief software engineer at Oracle and member of the MySQL optimizer team.

In an online letter, the engineer who is now on the Google Chrome team gave readers no doubt about his views on MySQL.

The London taxi-hailing app cannot pass its legal obligations to gig economy drivers, and the England and Wales Court of Appeal ruled that Uber was hit.

The court said this morning that [PDF] the German-based taxi app Free Now cannot operate in the British capital without assuming legal responsibility for providing taxi itineraries, and made a summary judgment in two separate but closely related cases.

First, Free Now's UK branch (also known as Transopco UK Ltd) argued that as an intermediary, it has no contractual obligation to provide taxi itineraries, saying that this is the legal responsibility of its drivers. The judge ruled that Free Now’s business model and Uber’s business model “have no substantial difference”.

The old is new: linking open-source Unix-like systems, local cluster operating systems for massively parallel computers, and platform competition in the 1980s. You got all of this in a somewhat dusty project, hoping to breathe new life into Helios, a many-core operating system from the 90s.

Parallel computing is back in fashion. Just last week, The Reg installed a cheap Arm cluster in a box; and supports 24-core Atom chips and 64-core ARM chips in the next Linux kernel.

Back in the 1980s, Intel couldn't make a machine with so many cores for you—but a small British company called Inmos could. Although a remote descendant of Inmos provides a processor in relatively new Amiga hardware, there is an older connection.

The US Federal Bureau of Investigation (FBI) stated that as of early November this year, 49 organizations (including some government agencies) have been attacked by Cuban ransomware.

The attacks were spread across five "critical infrastructure", which included finance, healthcare, manufacturing, and-as you would expect-IT departments, in addition to governments. The FBI said late last week that the threat actor demanded a ransom of US$76 million and had received a ransom of at least US$43.9 million.

The loader Hancitor chosen by the ransomware group is the culprit. It is distributed through phishing emails or exploiting Microsoft Exchange vulnerabilities, compromised credentials, or remote desktop protocol (RDP) tools. Hancitor (also known as Chanitor or Tordal) uses legitimate Windows services (such as PowerShell) to enable the CobaltStrike beacon as a service on the victim's network.

RE:INVENT AWS firmly believes that "modern processors are not optimized for modern workloads," Peter DeSantis, senior vice president of infrastructure at this cloud company, claimed at the latest annual Re:invent party in Las Vegas .

DeSantis talked about AWS Graviton 3 Arm-based processors last week, so to speak, providing more meat around the bones-in his comment, the word "modern" did a lot of work.

From the perspective of a hyperscale cloud provider, the computing environment looks different; what is important is not flexibility, but centralized optimization and predictable performance.

Google employees can continue to work from home and no longer need to return to campus on January 10, 2022, as previously expected.

This decision marks another delay in getting more employees back to their desks. For large technology companies, determining a definite return date during the COVID-19 pandemic is a nightmare. Due to the increase in the number of cases or the spread of new variants of respiratory diseases worldwide, such as the new Omicron strain, all attempts have been postponed.

Google’s vice president of global security, Chris Rackow, disclosed the news to employees in a company-wide e-mail, which was originally reported by CNBC. He said that Google will wait until the New Year to figure out when American campuses can be safely reopened for mandatory return.

Registration Debate Welcome to the latest registration debate, where authors discuss technical topics and readers choose the winning arguments. The format is simple: we propose a proposal, the arguments of the proposal will be carried out on Monday and Wednesday, and the arguments against will be carried out on Tuesday and Thursday. Within a week, you can use the polls embedded below to vote for which party and choose whether you are for or against the motion. The final score will be announced on Friday, and the arguments for or against are the most popular.

This week’s proposal is: A unified and unknowable software environment can be realized. We discussed a question: Can the industry have a truly open, unified, and agnostic software environment in HPC and AI that can span multiple computing engines?

Our first contributor to support the proposal was Nicole Hemsoth, co-editor of The Next Platform.

Oracle's data center in Linlithgow, Scotland will be closed in the next few months, leaving customers facing cloud migration or migrating to an alternative colocation data center.

According to multiple insiders told The Register, Oracle has been trying to transfer its data center customers to Oracle's cloud infrastructure-with mixed results.

The history of the Linlithgow plant can be traced back to the days of Sun Microsystems, where the company opened a manufacturing plant in 1990.

The Register-Independent news and opinions from the technical community. Partially released

Hand biting IT © 1998–2021