Connect with us
DAPA Banner

Crypto World

IoTeX bridge exploit raises debate over losses and recovery prospects as CEO offers 10% bounty

Published

on

IoTeX bridge exploit raises debate over losses and recovery prospects as CEO offers 10% bounty

IoTeX offered a 10% white-hat bounty to the hacker or hackers who exploited a private key on its cross-chain bridge ioTube, siphoning millions of dollars, in exchange for the voluntary return of funds within 48 hours.

With this move, IoTeX is offering the $440,000 if the malicious actor or actors return roughly $4.4 million they stole, according to an IoTeX X post, to which IoTeX co-founder and CEO Raullen Chai pointed “as a source of truth” on Monday.

Chai told CoinDesk that the team sent an onchain message offering not to pursue legal action or share identifying information with law enforcement if the remaining funds are returned.

“This is regarding the ioTube bridge exploit on Feb. 21, 2026,” Chai said in the message. “All fund movements across Ethereum, IoTeX, and bitcoin have been fully traced.”

Advertisement

The message states that exchange deposits have been flagged and frozen and offers a 10% bounty for the return of remaining funds.

Chai also said IoTeX is rolling out a new chain version, Mainnet v2.3.4, requiring node operators to upgrade. The update includes a default blacklist of malicious externally owned account (EOA) addresses.

“This blacklist contains a list of malicious or problematic EOA addresses that will be filtered by the node,” Chai said.

The offer comes after a Feb. 21 exploit in which a compromised validator owner private key enabled unauthorized control over ioTube’s bridge contracts.

Advertisement

IoTeX said the incident is “under control,” saying that its Layer 1 blockchain was not affected and that the breach was isolated to the Ethereum-side infrastructure of the bridge.

The IOTX token fell roughly 22% following the exploit, dropping from $0.0054 to below $0.0042 before partially rebounding.

Cross-chain bridges have been one of crypto’s main failure points, with several high-profile exploits in recent years. According to industry reports, more than $3.2 billion has been lost due to cross-chain bridge hacks, making them a prime target for advanced threat actors.

Responsibility and key control

IoTeX framed the exploit as an operational issue specific to the bridge rather than a failure of its Layer 1 network.

Advertisement

“IoTube is IoTeX’s own cross-chain bridge built and maintained by their team,” Nick Motz, CEO of ORQO Group and CIO of Soil, told CoinDesk. “The breach came down to a compromised validator owner private key on the Ethereum side, which is fundamentally an operational security failure, not a smart contract vulnerability discovered by an outside actor.”

Motz agreed that IoTeX’s Layer 1 was not compromised but said user funds were entrusted specifically to the bridge.

“When you build and operate the bridge infrastructure and the key management is what fails, it’s difficult to separate yourself from that outcome,” he said.

Nanak Nihal Khalsa, co-founder of human.tech, said responsibility in crypto often comes down to key custody.

Advertisement

“Yes, whoever holds the private key is responsible for securing it,” Khalsa said. “Is that a reasonable responsibility? It’s hard to say. But that’s how the industry works right now.”

He added that liability norms remain unsettled compared to traditional finance and called for stronger wallet and multisig setups to reduce similar risks.

The estimates diverge

On-chain analysis by security firm PeckShield estimated more than $8 million worth of assets were affected, saying the attacker swapped funds into ether (ETH) and began bridging them to bitcoin via THORChain.

“The hacker has swapped the stolen funds to $ETH and has started bridging them to #BTC via #Thorchain,” the firm wrote.

Advertisement

Another onchain investigator, Specter, said on X that “the private key of @iotex_io may have been compromised,” resulting in an estimated $4.3 million loss.

“Once assets are routed through THORChain […] recovery becomes extremely difficult,” Motz said.

IoTeX said it has identified four bitcoin addresses holding 66.78 BTC worth roughly $4.3 million at current prices and that the addresses are being monitored in cooperation with exchanges.

A CoinDesk review of those addresses on Feb. 23 confirmed they held roughly 66.6 BTC.

Advertisement

IoTeX did not immediately respond to CoinDesk’s request for comment.

“Containment is not the same as recovery,” he added. “The assets with actual market value were swapped and bridged. Those are, in my assessment, unlikely to be recovered.”

Khalsa similarly cautioned that recovery prospects are uncertain. “It’s hard to predict how much, if any, can be recovered,” he said.

IoTeX revised its figure upward to approximately $4.3 million, reflecting the direct asset drain but excluding minted tokens. Motz said broader estimates may better capture the severity of the breach.

Advertisement

“Private key compromise rather than smart contract bugs is emerging as a dominant attack vector,” Motz said, noting that such incidents target operational security rather than audited code.

Before offering the 10% bounty, IoTeX said a compensation plan would be in place within the next 48 hours.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Can the crypto market rebound as SEC clarifies that most cryptocurrencies are non securities?

Published

on

46% of Bitcoin supply now in loss, near 2022 bear levels

The crypto market remained unfazed on Wednesday shortly after the U.S. Securities and  Exchange Commission clarified that most of the cryptocurrencies in the market would not be considered a security under federal law.

Summary

  • The crypto market remained largely muted after the SEC clarified its framework for determining whether tokens qualify as securities.
  • Bitcoin held near the $74,000 level while major altcoins showed limited movement, keeping total market capitalization around $2.61 trillion.
  • Investor focus shifted to macro catalysts, with traders positioning cautiously ahead of the Federal Reserve’s rate decision and expectations for delayed rate cuts.

Bitcoin (BTC), the world’s largest crypto asset, traded at $73,909 with no net movement over the daily period after it gave up most of its gains from the past day when it surged past the $75,000 resistance. 

Ethereum (ETH), Solana (SOL), Dogecoin (DOGE), and Chainlink (LINK) were some of the major crypto assets that also showed relative calmness with minor gains on Wednesday. Together, these assets provided little volatility for the broader market, with the total crypto market cap stalling at $2.61 trillion.

Advertisement

On Tuesday night, the U.S. SEC issued a notice that clarifies how the securities watchdog would determine if a token would be deemed securities or not and how a non-security asset can be part of an investment contract under the Howey Test. 

While the SEC did not broadly classify most cryptocurrencies as non-securities, the updated framework suggests that many tokens may fall outside securities laws depending on their structure, distribution, and use case. 

Previously, the agency’s stance on which cryptocurrencies could be deemed securities remained unclear, creating significant uncertainty for market participants navigating the regulatory landscape.

Advertisement

The new crypto asset taxonomy provides much-needed clarity, but the SEC also classified 16 major crypto assets as digital commodities, outside the jurisdiction of securities law. These include prominent tokens like Litecoin and Cardano.

Other key developments supporting market sentiment include SEC Chair Paul Atkins’ recent proposal for a crypto safe harbor framework.

While such a development is a major win for the crypto industry, which has faced years of legal uncertainty, the market’s relatively muted reaction comes from a cautious atmosphere as investors await the outcome of Fed rate cut decisions later today at 2:30 P.M. ET.

Markets expect that the Fed will keep rates steady in the current range of 3.50% to 3.75%. The CME FedWatch Tool currently shows a 96% to 99% odds that the Fed will hold interest rates, with only a marginal 1% to 4% chance of a cut.

Advertisement

Traders also seemed to have pushed back their expectations for the next rate cut, with many now anticipating the first reduction of 2026 to occur no earlier than September or October.

Typically, when investors expect a delay in Fed rate cuts, risk assets such as cryptocurrencies tend to lose momentum as investors step back, often awaiting clearer macroeconomic catalysts before reengaging with the market.

Total crypto market open interest dipped slightly over the past day, signaling traders are closing positions ahead of potential volatility.

Advertisement

Disclosure: This article does not represent investment advice. The content and materials featured on this page are for educational purposes only.

Source link

Advertisement
Continue Reading

Crypto World

Bitrefill blames North Korea-linked Lazarus hacker group for compromising 18,500 purchase records

Published

on

Blockchain sleuth ZachXBT alleges Axiom employee conducted insider trading

Cryptocurrency payments and gift card platform Bitrefill has blamed the North Korea-linked hacking group Lazarus for a cyberattack on March 1, 2026, that compromised parts of its infrastructure and cryptocurrency wallets.

The attackers gained access to production keys, transferred funds from hot wallets, and exposed 18,500 purchase records containing emails, payment addresses, and IP addresses.

Approximately 1,000 records included encrypted usernames. Affected users were notified. Operations have resumed, with the company announcing to cover losses from operational capital. The incident underscores the importance of vigilance regarding crypto and on-chain security.

The modus operandi included malware, on-chain tracing and reused IP and email addresses and was similar to previous attacks attributed to North Korea’s Lazarus Group, also known as Bluenoroff, the company said in a detailed report on X.

Advertisement

The Lazarus Group has previously targeted crypto projects including Ronin Network, Harmony’s Horizon Bridge, WazirX, and Atomic Wallet.

How the attack unfolded

It all began with with a compromised employee laptop, which exposed legacy credentials and allowed attackers to access Bitrefill’s broader infrastructure, including parts of its database and cryptocurrency wallets.

The breach quickly became apparent when the company noticed unusual purchasing patterns among certain suppliers, signaling that attackers were exploiting its gift card inventory and supply chains. The firm also noted that attackers were draining some hot wallets and moving funds to their own addresses, following which, the system was taken offline to contain the damage.

“Bitrefill operates a global e-commerce business with dozens of suppliers, thousands of products, and multiple payment methods across many countries. Safely switching all these things off and bringing them back online is not trivial,” the company said in a statement.

Advertisement

Since the incident, Bitrefill has been working with security researchers, incident response teams, on-chain analysts, and law enforcement to investigate the breach.

Customer data impact

Hackers accessed a small set of purchase records, approximately 18,500, containing

Bitrefill said there is no evidence that customer data was a primary target. Its logs indicate that attackers ran a limited number of queries aimed at cryptocurrency holdings and gift card inventory rather than extracting the entire database.

The platform stores minimal personal data and does not require mandatory KYC. A small subset of purchase records, approximately 18,500, was accessed, containing information such as email addresses, crypto payment addresses, and metadata including IP addresses. About 1,000 records contained encrypted names for specific products; the company is treating this data as potentially compromised and has notified affected customers directly by email.

Advertisement

At present, Bitrefill does not believe customers need to take any additional action, though it advises caution regarding unexpected communications related to Bitrefill or cryptocurrency.

Steps to strengthen security

In response to the breach, Bitrefill said it has already strengthened its cybersecurity practices and is working to draw lessons from the incident.

The company outlined several measures, including conducting comprehensive penetration tests with external experts, tightening internal access controls, enhancing logging and monitoring for faster threat detection, and refining incident response procedures and automated shutdown protocols.

Looking forward

Bitrefill acknowledged that this was its first major attack in more than a decade of operation but stressed that it remains well-funded and profitable, capable of absorbing operational losses. Most systems, including payments, stock, and accounts, are back online, with sales volumes returning to normal.

Advertisement

“Getting hit by a sophisticated attack sucks (a lot),” the company said. “But we survived. We will continue to do our best to continue deserving our customers’ trust.”

Source link

Continue Reading

Crypto World

Lazarus Group suspected in Bitrefill hack that compromised hot wallets

Published

on

Bonk.fun users report drained wallets after hackers hijack platform domain

The notorious Lazarus Group may have been behind a cyberattack on crypto e-commerce store Bitrefill, the firm estimates.

Summary

  • Bitrefill linked a March 1 cyberattack to tactics associated with the Lazarus and BlueNoroff groups, after attackers compromised an employee laptop and drained funds from hot wallets.
  • Around 18,500 purchase records were accessed, though the company said only limited customer information was exposed and there was no evidence of a full database breach.

Detailing the March 1 incident in a Tuesday X post, the firm said the attackers used malware, on-chain tracing, and reused IP and email infrastructure to drain funds from its hot wallets after compromising an employee’s laptop. Attackers also allegedly accessed around 18,500 purchase records, although this involved only “limited customer information.”

“We find many similarities between this attack and past cyberattacks by the DPRK Lazarus / Bluenoroff group against other companies in the crypto industries,” the firm wrote.

Advertisement

Bitrefill is a crypto e-commerce platform that allows customers to spend digital assets on real-world products and gift cards. It added that the attackers were primarily financially motivated, as there was “no evidence that they extracted our entire database.”

“The attackers ran a limited number of queries consistent with probing to understand what there was to steal, including cryptocurrency and Bitrefill gift card inventory,” it added.

Bitrefill did not disclose how much crypto was stolen but said it would absorb the losses from its operational capital.

Advertisement

“We have already significantly improved our cybersecurity practices, but vow to continue to draw learnings from this experience to make sure user and company balances and data remain maximally safe,” Bitrefill said, adding that all operations were back to normal.

The company has since strengthened its security posture and has contacted law enforcement while working with security firms to investigate and respond to the incident.

Lazarus group remains a major threat

Over the years, the Lazarus Group has been credited with some of the crypto industry’s largest hacks.

One of the biggest attacks involved crypto exchange Bybit, which lost around $1.4 billion last year. The group was also a suspected actor behind the hack of South Korean crypto exchange Upbit and UK-registered trading platform Lykke.

Advertisement

Source link

Continue Reading

Crypto World

XRP hits $1.60 after stunning comeback: ‘rare bottom’ signal triggers buzz

Published

on

XRP price outlook as SBI CEO debunks $10B XRP holdings claim
XRP price climbs after hitting a rare bottom as outflows from XRP ETFs in recent weeks restrain buying pressure.
  • XRP shows rare bottom signals and strong rebound potential.
  • The key support at $1.44–$1.48 will guide near-term price action.
  • A break above $1.60 with volume needed to sustain the rally.

XRP has grabbed the spotlight after overtaking BNB in market cap ranking following its recent price rebound.

Analysts point to technical signals that suggest XRP may have recently formed a long-term bottom.

These signals include an oversold RSI on the weekly chart and a stretch of negative funding rates that historically appear before significant rebounds.

XRP rebounded after hitting a rare bottom

After a period of sideways trading, XRP surged to a weekly high near $1.60.

Advertisement

This move followed a modest beta-driven pullback alongside Bitcoin, reflecting that broader market trends still influence XRP.

Despite the rally, the cryptocurrency faced technical resistance, with momentum indicators suggesting it had been overbought.

Trading volumes have cooled after the rally, which is typical when an asset approaches a key resistance area.

The current support zone around $1.44–$1.48 has become crucial.

Advertisement

Holding above this area could allow XRP to test $1.60 again and potentially reach new resistance levels beyond that.

Conversely, a breach below this support may see a decline toward $1.34, highlighting the importance of technical positioning.

What is fueling XRP’s rally?

XRP’s recent gains were fueled by multiple factors. First, its short-term correlation with Bitcoin helped it catch a wave as the broader market dipped slightly.

Second, technical patterns are now aligning in a way that traders rarely see, suggesting the bottom may hold.

Advertisement

Third, market inflows from institutional investors remain a key driver, especially in the form of spot XRP ETF activity.

Outflows from these ETFs in recent weeks have restrained buying pressure, but a reversal could reignite momentum.

But despite these positives, risks remain.

Volume remains lower than during the peak of the rally, signaling that conviction is not yet at its highest. Moreover, the current resistance at $1.60 is a significant hurdle.

Advertisement

A breakout above it, supported by rising trading activity, would confirm that the uptrend can continue.

However, caution is warranted, as the cryptocurrency is still navigating critical resistance and depends on continued support from market flows.

Traders should closely watch to see if XRP can hold its gains and build on this rare bottom.

If the support around $1.44-$1.48 remains firm and institutional demand resumes, the path toward higher levels may be within reach.

Advertisement

At the same time, failing to hold this support could quickly undo the recent gains.

For now, XRP sits at a critical juncture, with potential for both continuation and retracement depending on the next wave of market activity.

Advertisement

Source link

Continue Reading

Crypto World

Bitcoin price outlook: Citigroup predicts $112K despite regulatory roadblocks

Published

on

Bitcoin price outlook: buy signals appear
Bitcoin nears $74K as Citi cuts target to $112K. Regulatory delays and market risks shape the crypto outlook now.
  • Citigroup forecasts Bitcoin at $112,000 despite slow US crypto legislation.
  • Bitcoin price ranges show cautious momentum with potential volatility ahead.
  • Institutional demand remains key amid regulatory uncertainty.

Bitcoin has been steadily climbing over the past week, with its price now sitting around $74,000.

This marks a 6.5% increase over the last seven days, showing renewed momentum after several months of sideways movement.

Citigroup, in its latest update, adjusted its 12-month price forecast for Bitcoin to $112,000, from its previous target of around $143,000.

Citi’s move reflects a cautious optimism shaped by both market dynamics and regulatory developments.

Regulatory headwinds weigh heavily

One of the main reasons for Citigroup’s revised forecast is the slow progress on US cryptocurrency legislation. Lawmakers have yet to finalize clear rules on key issues like stablecoins and decentralized finance.

Advertisement

This lack of clarity is affecting institutional adoption.

Investment firms and hedge funds are hesitant to increase exposure without clear regulatory guidance. The window for passing meaningful crypto laws in the Senate is narrowing.

Internal political divisions are slowing the process further.

Without these legislative catalysts, the market may continue to trade in ranges despite overall optimism.

Advertisement

Citigroup notes that this legislative uncertainty could act as a ceiling for Bitcoin in the near term. Even with strong demand from retail and institutional investors, clear rules are needed to support sustained growth.

What traders should watch out for

Ethereum, Bitcoin’s closest competitor, is also experiencing slower growth due to similar challenges.

Citigroup lowered Ethereum’s 12-month target to $3,175, down from over $4,000. Both cryptocurrencies are influenced by network activity and investor demand, which have shown signs of weakening.

Currently, Bitcoin is trading within a 24-hour range of $73,500 to $74,800, showing relatively stable momentum.

Advertisement

Over the past week, it has moved between $69,000 and $75,600, indicating that volatility is still present.

Citigroup outlines several potential scenarios for Bitcoin’s trajectory. In a bear case, a broader economic downturn or continued regulatory delays could push the price toward $58,000.

On the other hand, strong investor interest and institutional flows could drive it up to $165,000.

These scenarios suggest a wide range of outcomes, highlighting the risks and opportunities for traders.

Advertisement

Even in the base case, Bitcoin is expected to trade around $112,000 within 12 months if adoption trends continue and market confidence improves.

This makes it an attractive, though still volatile, asset for those looking to participate in the cryptocurrency market.

The road ahead is clearly influenced by policy decisions, investor sentiment, and market activity, and traders will need to watch for both regulatory developments and demand signals to navigate this landscape successfully.

Source link

Continue Reading

Crypto World

Major Governance Platform Tally Announces Shutdown Amid Regulatory Shifts

Published

on

Major Governance Platform Tally Announces Shutdown Amid Regulatory Shifts


Tally announced its shutdown amid the shifting regulatory climate regarding cryptocurrencies in the US.

The regulatory climate in the US is shifting, and although many consider it for the better, the changes are already taking effect.

Tally, a governance tooling platform that’s used by more than 500 decentralized autonomous organizations (DAOs), including Uniswap, Ethereum Name Service (ENS), and Arbitrum, announced that it will be shutting down after more than five years of operations.

Advertisement

In a video posted on X, the CEO of Tally, Dennison Bertram, outlined some reasons for the decision to wind down operations.

The move comes just as the SEC and the CFTC issued joint guidance clarifying that most cryptocurrencies are not securities, a major de-risking event for the entire industry.

While the previous administration pushed many projects toward a decentralized structure in the form of a DAO to reduce legal risk, the current, more relaxed environment has reduced demand for DAO governance, as Wu Blockchain noted in its commentary on the news.

Advertisement

Tally will not be conducting an ICO. Bertram said that continuation plans are already in the works with all of the firm’s enterprise clients, while the interface will remain operational for them as needed.

SPECIAL OFFER (Exclusive)

Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Advertisement

Source link

Continue Reading

Crypto World

More Australians Pay With Crypto But Bank Restrictions Grow

Published

on

More Australians Pay With Crypto But Bank Restrictions Grow

More Australians reported using cryptocurrency to pay for goods and services in 2026 compared to the year before, but banking friction has continued to weigh on crypto users, according to a newly published report by crypto exchange Independent Reserve.

The annual survey of 2,000 “everyday Australians” was conducted between Jan. 12 and Jan. 30.

It found that the share of Australians using crypto to buy goods or pay for services doubled from 6% to 12%, with the report suggesting “more Aussies are viewing crypto as a practical payment method rather than just a speculative bet.”

Among the respondents who used crypto for goods and services, 21% reported using crypto for online shopping, making it the leading real-world use case.

Advertisement

Another 16% said they used crypto to pay for services such as freelancing and video game purchases.

Despite growing adoption, barriers remain, with some citing a lack of education and training, and the technology being too complex to use.

Online shopping was the main use case for crypto among survey respondents. Source: Independent Reserve

Banking issues on the rise 

Beyond complexity, banking blocks were highlighted as a significant obstacle. A Binance survey last year found that users faced banking barriers when engaging with exchanges and crypto businesses — a problem the Independent Reserve’s survey respondents also flagged. 

Around 30% of investors said they have experienced delays or rejections when trying to buy cryptocurrency or transfer funds to a crypto exchange at least once, compared with 19.3% in 2025.

Banking restrictions on crypto transactions in Australia tightened around 2023, when major banks, including Commonwealth Bank and National Australia Bank, introduced measures such as payment delays, caps on transfers to crypto exchanges and additional identity checks.

Advertisement

Younger investors reported more trouble with transaction delays than their older counterparts, and those making smaller transactions reported greater interference.

Younger users reported higher instances of banking interference when trying to buy crypto. Source: Independent Reserve

“For many Australians, the lack of regulation hits home when a payment to a crypto exchange is delayed or blocked, an issue that has continued to rise for another year,” the report authors said.

“These interruptions affect both consumers and businesses, showing how cautious banks are with crypto when the rules aren’t clear.”

Clear licensing and regulation are the solution

The report said the findings suggest that banks have not relaxed their posture toward crypto and may be refining their approach by focusing on user behavior and transaction patterns instead of transaction size, underscoring the growing need for regulatory clarity.

Related: Crypto lobby slams Australian broadcaster’s ‘sensational’ Bitcoin article

“Clear licensing and regulation can help fix this. By setting high standards for crypto operators, banks would have more confidence that transactions are legitimate,” they added.

Advertisement

“For Australia’s blockchain industry, which has faced banking hurdles for over a decade, effective regulation could finally bridge the gap between exchanges and banks, giving investors and businesses more certainty and reliability.”

Crypto executives told Cointelegraph last month that Australia’s crypto market is making progress in user growth and regulatory reforms, but there are still a range of issues to iron out.

Magazine: Clarity Act risks repeat of Europe’s mistakes, crypto lawyer warns