Cryptocurrency exchange claimed it was 'practically impossible' to hack. It was hacked.

No one could have ever possibly seen this coming.
By Jack Morse  on 
Cryptocurrency exchange claimed it was 'practically impossible' to hack. It was hacked.
Whoops. Credit: Ladislav Kubeš/getty

I guess we shouldn't be all that surprised. But still, they did say it would be practically impossible.

The Japan-based cryptocurrency exchange Zaif suffered a major hack last week. It issued a statement on Thursday stating that approximately $59 million worth of bitcoin, bitcoin cash, and MONAcoin had been stolen by unidentified criminals. This, obviously, is not good. What makes it perhaps worse is the company's past insistence that it applied the "maximum effort" possible to keep its customers' funds safe — and that hacking it would be "practically impossible."

Like many exchanges, Zaif has a page on its website where it details the precautions taken to secure customer funds. With tens (or potentially hundreds) of millions of dollars worth of cryptocurrency at stake, it makes sense to let everyone know that you're taking this security stuff seriously.

Take, for example, the webpage titled "About the Zaif usage risk and security system." It lays out six points "in order to ensure maximum safety and security."

Under the third point, "Reinforcement of system infrastructure robustness," we are given the following bit of reassurance.

Mashable Light Speed
Want more out-of-this world tech, space and science stories?
Sign up for Mashable's weekly Light Speed newsletter.
By signing up you agree to our Terms of Use and Privacy Policy.
Thanks for signing up!

"We externally block the exchange system at multiple levels, and we are building a system security environment where hacking into the internal system is practically impossible. Therefore, all outside access to the database, etc. is impossible."

According to a company statement detailing the hack, translated from the original Japanese (via Google translate), "it turned out that some of the deposits and withdrawal hot wallets were hacked by unauthorized access from the outside, and part of the virtual currency managed by us was illegally discharged to the outside."

Hmm.

Now, the crypto that was stolen was reportedly in a so-called "hot wallet" — a wallet that is connected online which allows customers to withdraw or transfer funds immediately — and not a more secure cold wallet. Perhaps it was the company's cold wallet that's "practically impossible" to hack?

This Zaif debacle is just another in a long line of breached exchanges. The most notable of which, the 2014 Mt. Gox hack, resulted in the theft of around 850,000 bitcoins. In January of this year, another Japan-based exchange, Coincheck, was also hacked for roughly 500 million NEM — worth approximately $424 million at the time.

It's almost as if it's not practically impossible to hack an exchange at all.

Mashable Image
Jack Morse

Professionally paranoid. Covering privacy, security, and all things cryptocurrency and blockchain from San Francisco.


Recommended For You

Trending on Mashable
Wordle today: Here's the answer and hints for April 25
a phone displaying Wordle

NYT Connections today: See hints and answers for April 25
A phone displaying the New York Times game 'Connections.'

NYT Connections today: See hints and answers for April 24
A phone displaying the New York Times game 'Connections.'

Wordle today: Here's the answer and hints for April 24
a phone displaying Wordle

The biggest stories of the day delivered to your inbox.
This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.
Thanks for signing up. See you at your inbox!