Cointime

Download App
iOS & Android

WazirX hackers prepped 8 days before attack, swindlers fake fiat for USDT: Asia Express

WazirX hackers were preparing 8 days before the $235M theft

The hackers behind the $235 million WazirX crypto exchange breach began preparing onchain at least eight days prior, according to Polygon Labs’s security chief.

WazirX, one of India’s largest cryptocurrency exchanges, lost hundreds of millions to a multisig wallet hack on Thursday, July 18, which is being blamed on North Korean hacking organization Lazarus Group.

Mudit Gupta, the Chief Information Security Officer of Polygon Labs, suggests the hackers had started “practicing” the hack onchain more than a week prior to executing the attack.

It started with hackers upgrading the multisig to a malicious version that would later allow them to drain it, Gupta explained in a July 18 post on X.

  (Mudit Gupta)

Tarun Mangukiya, the co-founder of payment platform Copperx, believes the hackers may have tricked WazirX into upgrading its Safe Implementation Skeleton.

“Why did they upgrade it instead of just draining?” Gupta asked rhetorically.

Draining takes time and multiple transaction. They likely didn’t have access to all the required private keys and were dependent on signature phishing which they can’t do multiple times without getting caught.”

In a follow-up post on X, WazirX has described the attack as a “force majeure event beyond our control.”

“We have already blocked a few deposits and reached out to concerned wallets for recovery,” it added.

The exchange announced a temporary withdrawal freeze soon after the hack.

India’s crypto sector holds breath for tax relief

Elsewhere in India, the cryptocurrency industry is eagerly hoping for relief from the country’s stringent crypto tax regulations, with India Finance Minister Nirmala Sitharaman set to present the Union Budget for the next fiscal year on July 23.

Since 2022, India has slapped one of the world’s most severe tax regimes on cryptocurrency, with a flat 30% capital gains tax on profits from digital assets, including non-fungible tokens (NFTs).

In addition, a 1% tax deducted at source (TDS) is levied on crypto transactions.

India’s crypto sector has been advocating a reduction in the TDS rate to 0.01% in the forthcoming budget.

Sumit Gupta, CEO of CoinDCX, an exchange involved in pre-budget consultations, says this adjustment is seen as crucial to recapturing business that has shifted to offshore exchanges due to current heavy taxation.

“We have also requested for a reduction in TDS rate… from 1% to 0.01%,” Gupta said in a statement shared with Magazine.

We have also requested for a reduction in capital gains tax rate from 30% to the actual [income bracket] of the assessee.”

Since the introduction of these tax measures in Sitharaman’s 2022 Budget speech, Indian crypto exchanges have seen a drastic decline, with trading volumes plummeting by 97% and active users decreasing by 81%, according to a recent report by The National Academy of Legal Studies and Research (NASLAR).

NASLAR’s research found that the national treasury is losing approximately $700 million (59 billion Indian rupees) in tax revenue due to diminished activity on India’s leading exchanges.

Effective “virtual digital assets” tax rates. (NASLAR)

The study suggests that reducing the TDS rate to 0.01% could potentially double the nation’s tax revenue in the upcoming fiscal year.

So far, India has had a hot and cold relationship with cryptocurrency while maintaining a positive outlook toward the potential of blockchain technology.

The industry’s growth hit a wall in 2018 when the Reserve Bank of India, the central bank, prohibited financial institutions from servicing crypto businesses — a ban that was overturned by the Supreme Court in 2020.

More arrests in Hong Kong over fake cash for USDT scam

Hong Kong authorities have arrested three more suspects for allegedly selling counterfeit banknotes in exchange for stablecoin Tether (USDT).

Local media reported on July 15 that a 44-year-old businessman was deceived into transferring $399,000 (3.11 million Hong Kong dollars) in USDT.

The businessman then received three bundles of 1,000 Hong Kong dollar notes, with the counterfeit notes sandwiched by genuine bills.

Suspects met with the victim in a hotel in the major shopping district of Tsim Sha Tsui before being taking him to finalize the deal at Mong Kok district, which is about a 10-minute drive away.

Police have detained three suspects, a woman and two men, on suspicion of obtaining property by deception and possession of counterfeit banknotes. If convicted, they could face sentences ranging from 10 to 14 years in prison.

This case bears a striking resemblance to an incident in April 2024 when a victim was scammed for $128,000 (1 million Hong Kong dollars).

The case involved “hell notes,” which are unofficial paper money burned during traditional ancestral worship ceremonies. These notes represent offerings to ancestors in the afterlife.

A 35-year-old man was shown stacks of these “hell notes” in exchange for USDT in a Tsim Sha Tsui shop. However, the alleged scammers refused to hand over the notes and disappeared.

Local media reported in May (a month after the victim’s police report) that three suspects were arrested and 3,000 hell notes were confiscated.

According to local media, counterfeit fiat scams are on the rise in the city. From January to April 2024, the police busted $326,130 worth of fake notes.

A visual prison cell generated by artificial intelligence

Insider crypto trading in South Korea can now land you life in prison

South Korea’s cryptocurrency investor protection law will officially come into force on Friday, July 19.

The “Act on the Protection of Virtual Asset Users,” enacted on July 18, 2023, aims to safeguard crypto investors’ assets and prohibit unfair trading practices.

The legislation mandates that users’ deposits be segregated from company funds and held by a regulated financial institution. To further protect users’ assets, the law requires that a large chunk of these assets — 80% or more of their economic value — be stored offline, such as in cold wallets.

Crypto businesses are also required to take measures to cover potential liabilities arising from hacking or system failures. These measures include obtaining insurance or setting aside reserves which must cover at least 5% of the economic value of assets not stored offline.

The law prohibits activities such as using undisclosed information for trading (insider trading), market manipulation, and fraud. Violations can result in severe penalties, including criminal charges and fines.

Criminal penalties may include imprisonment for at least one year, with fines ranging from three to five times the amount of illegal gains. If the illegal gains exceed $3.6 million (5 billion Korean won), the maximum penalty can be life imprisonment, along with fines amounting to twice the illegal gains.

Hackers send stolen crypto to marketplace with ties to Cambodia PM’s family

North Korea’s Lazarus Group is suspected of laundering at least $35 million in USDT on Tron so far this month through the online Cambodian marketplace Huione Guarantee.

Blockchain detective ZachXBT linked these laundered funds to the $305 million worth of Bitcoin stolen from DMM, a Japanese cryptocurrency exchange that suffered the year’s most significant breach in late May.

According to ZachXBT, offchain indicators and laundering techniques suggest that the Lazarus Group is the prime suspect in the DMM hack.

Huione Guarantee is a multibillion-dollar marketplace owned by the Huione Group, which also operates the foreign exchange business Huione Pay.

An investigation by blockchain forensics firm Elliptic alleges that Hun To, a cousin of Cambodian Prime Minister Hun Manet, is one of the directors of Huione Pay.

Hun To was reportedly suspected of money laundering and drug trafficking by Australian authorities over a decade ago. Hun To has denied the allegations.

In a separate report on July 15, Reuters found that Huione Pay received approximately $150,000 from North Korean hackers.

Reuters-cited blockchain analysts claiming that Huione Pay received funds from an anonymous digital wallet used by Lazarus to deposit stolen assets from three different crypto firms.

Comments

All Comments

Recommended for you

  • BTC breaks through $97,000

    the market shows BTC breaking through $97,000, now trading at $97,011.43, with a 24-hour increase of 0.85%. The market is volatile, please manage risks.

  • The JuCoin ecological project JuChain has been launched on the main network, and the public chain co construction summit will be held. The ecological debut protocol is Butterfly

    Cointime News:JuCoin's self-developed public chain JuChain has been launched on the main network. The JuChain Public Chain Co construction Summit initiated by JuCoin will be held on May 15, 2025 in Bangkok, Thailand. The conference will release the first ecological agreement--

  • BTC breaks through $96,000

    the market shows that BTC has broken through $96,000 and is now trading at $96,014.98, with a 24-hour increase of 1.15%. The market fluctuates greatly, so please manage your risks well.

  • Martin Young ·

    North Carolina House passes state crypto investment bill

    North Carolina’s House passed a bill to allow the state treasurer to invest government funds in approved cryptocurrencies with a 71 to 44 vote.

  • Ciaran Lyons ·

    Galaxy Digital plans Nasdaq listing as crypto stocks post strong rebound

    Galaxy Digital’s Mike Novogratz says the Nasdaq listing will provide an easier gateway for exposure to the crypto and AI ecosystem.

  • Martin Young ·

    US crypto groups urge SEC for clarity on staking

    A group of nearly 30 crypto advocate groups has asked the SEC to provide legal clarity on crypto staking, arguing that it's not an investment activity.

  • JuCoin CEO: UX design in the encryption industry needs to pay attention to user emotional details to enhance user experience

    Cointime News: JuCoin CEO Sammi Li delivered a keynote speech at the TOKEN2049 conference, analyzing the current challenges in user experience (UX) design in the cryptocurrency industry. Sammi Li believes that the existing encryption product experience fails to effectively empathize with users, often leading to usage anxiety, which hinders the large-scale adoption of Web3. Combining her rich experience in the luxury goods industry, she emphasizes that building trust relies on paying attention to user emotions and critical moments of interaction, and constructing it through details rather than simply technical presentations. JuCoin is applying these user centered design principles to its Web3 ecosystem construction, aiming to lower user barriers and enhance user experience by optimizing JuChain and related product designs. It calls on the encryption industry to think together and place user experience at a more core position.

  • Xiongan New Area: Combining blockchain with digital RMB to launch "Digital Currency Loan" product, with payment amount of nearly 100 million yuan

    On January 11th, according to the Xiong'an Public Account, the digital RMB pilot in Xiong'an New Area has achieved new results. The first digital RMB tax payment transaction in the financial field has been completed, and self-service tax terminals have been developed. The "blockchain + digital RMB" technology is applied to government procurement management, increasing the proportion of advance payment and landing multiple applications to solve corporate problems. In 2024, the People's Bank of China Xiong'an New Area Branch, together with the Xiong'an New Area Reform and Development Bureau, will launch the "Implementation Plan for the Deepening of the Pilot Work of Digital RMB in the Rongdong Area", to enhance public awareness. By combining blockchain with digital RMB, the "digital currency loan" product will be launched, with a payment amount of nearly 100 million yuan.

  • Fardi Wang, Chairman of NEXUS 2140: AI•Web3•Ecom Global Expo, Made Appearance at Meta Crypto Oasis 2025 in Dubai

    Fardi Wang, Chairman of NEXUS 2140: AI•Web3•Ecom Global Expo, recently appeared at the Meta Crypto Oasis 2025 in Dubai, joining global Web3 leaders such as Justin Sun (Founder of TRON) and Chris (Co-founder of Sonic) to discuss the future of the industry. As the first cross-industry event integrating AI, Web3, and E-commerce, NEXUS 2140 is accelerating its international expansion through Fardi Wang’s active participation. At the summit, Fardi Wang emphasized that the integration of virtual and real-world assets is the key breakthrough for the Web3 ecosystem. He mentioned: “NEXUS 2140 is leveraging Korea’s policies, technological strengths, and ecosystem advantages to build a global industrial hub.” His insights received strong recognition from attendees, and the Dubai visit further amplified the international influence of the event, injecting new momentum into global digital economy collaboration.

  • Binance Wallet’s New TGE B² Network is Now Available for Investment

    according to official page data, Binance Wallet's new TGE B² Network is now open for investment, with an end time of 18:00 (UTC+8). The participation threshold for this TGE is that Alpha points must reach 82 points.