- Uniswap has become a popular place for laundering stolen coins.
- Several projects appear to be less decentralized than expected.
KuCoin hack teaches us a couple of costly lessons about the decentralized finance (DeFi) industry. Some of them may become a revelation for investors.
KuCoin's story: the summary
On 25 September, an unknown hacker exploited the vulnerability of the Asia-based cryptocurrency exchange KuCoin and drained its hot wallets of $281 million in cryptocurrency assets. The episode has become the third-largest theft in the history of cryptocurrency trading platforms.
The bad guys got away with a variety of assets, including Bitcoins, Litecoin and XRP. However, ERC-20 tokens accounted for over half of the loot.
The composition of the assets stolen from KuCoin
Source: www.elliptic.co
Lesson 1: Centralized exchanges turned into a dead end
According to the data provided by Elliptic's research, the service that enables detecting and investigating risky crypto transactions, hackers attempted to sell the stolen assets on the regular exchanges. However, this route was blocked within minutes after the hack. All major trading platforms are equipped with the tools to identify where the assets originated from and freeze any accounts receiving such funds.
Centralized cryptocurrency exchanges are very cooperative and tend to prevent the money laundering through their accounts. Moreover, some of the largest trading platforms cooperate with the authorities, providing them with tools to analyze blockchains and monitor suspicious activity.
Thus Coinbase reportedly has dealt with various US authorities, including the Drug Enforcement Administration (DEA) and the Internal Revenue Service (IRS). The cryptocurrency exchange provides a cryptocurrency investigation tool called "Coinbase Analytics."
Lesson 2: DEXs turned into crypto laundromats
Meanwhile, decentralized exchanges (DEXs) provided hackers with another option to bypass the anti-money laundering procedures and cash out the stolen assets.
Unlike the centralized counterparts, DEXs are governed by smart contracts, meaning that there is no intermediary or centralized authority between the participants of the trade.
This circumstance has a couple of consequences. First, the participants stay anonymous as they do not have to disclose their identities and go through know-your-customer (KYC) processes. Second, there is no one to freeze the account to seize the funds as everything is processed automatically, based on the rules of the smart contract.
KuCoin thief benefitted from the explosive growth of decentralized exchange activity on Ethereum and began selling the stolen ERC-20 tokens on these platforms without risk of being frozen.
DEXs involved in laundering funds stole from KuCoin
Source: www.elliptic.co
As the chart above shows, the hacker focused on four DEXs, Uniswap, Kyber Network, DEX.AG and Tokenlon, and laundered about $13.3 million in coins by the time of writing. Uniswap accounts for the lion's share of this activity.
While Elliptic claims that its blockchain monitoring solutions can trace the funds on DEXs, there is still no way to block the transactions that involve the funds originated from the hack.
Lesson 3: Decentralization can be falsified
Several projects introduced the measure to lock the funds stolen by the hacker. That's what Tether did, which is hardly surprising for the community. However, several projects that deemed to be decentralized pursued a similar strategy,
For example, Ampleforth (AMPL) and Ocean Protocol (OCEAN) also took decisive action against KuCoin's bad guy.
Ocean Protocol team performed a hard fork from a few blocks before the hack to roll back the transactions. A new chain will become the main for the protocol. Basically, Ocean Protocol opted for the Ethereum's approach to the DAO hack. Read our in-depth story of what happened next.
Ampleforth team tweaked their smart contract to block the hacker's address from moving their AMPL. While this solution may look less drastic, it reveals the lack of decentralization and opens up the way to censorship. Unlike the Ocean, where users can opt for the old chain and follow the suit of Etthereum Classic, Ampleforth changed the contract unilaterally and gave the community no choice.
Kardiachain, Orion Protocol, and Aleph all have taken similar steps showing their real centralized face.
Note: All information on this page is subject to change. The use of this website constitutes acceptance of our user agreement. Please read our privacy policy and legal disclaimer. Opinions expressed at FXstreet.com are those of the individual authors and do not necessarily represent the opinion of FXstreet.com or its management. Risk Disclosure: Trading foreign exchange on margin carries a high level of risk, and may not be suitable for all investors. The high degree of leverage can work against you as well as for you. Before deciding to invest in foreign exchange you should carefully consider your investment objectives, level of experience, and risk appetite. The possibility exists that you could sustain a loss of some or all of your initial investment and therefore you should not invest money that you cannot afford to lose. You should be aware of all the risks associated with foreign exchange trading, and seek advice from an independent financial advisor if you have any doubts.
Recommended Content
Editors’ Picks
Polygon joins forces with WSPN to expand stablecoin adoption
WSPN, a stablecoin infrastructure company based in Singapore, has teamed up with Polygon Labs to make its stablecoin, WUSD, more useful in payment and decentralized finance.
Coinbase envisages listing of more meme coins amid regulatory optimism
Donald Trump's expected return to the White House creates excitement in the cryptocurrency sector, especially at Coinbase, the largest US-based crypto exchange. The platform is optimistic that the new administration will focus on regulatory clarity, which could lead to more token listings, including popular meme coins.
Cardano's ADA leaps to 2.5-year high of 90 cents as whale holdings exceed $12B
As Bitcoin (BTC) gets closer to the $100,000 mark for the first time — it crossed $99,000 earlier Friday — capital is rotating into alternative cryptocurrencies, creating a buzz in the broader crypto market.
Shiba Inu holders withdraw 1.67 trillion SHIB tokens from exchange
Shiba Inu trades slightly higher, around $0.000024, on Thursday after declining more than 5% the previous week. SHIB’s on-chain metrics project a bullish outlook as holders accumulate recent dips, and dormant wallets are on the move, all pointing to a recovery in the cards.
Bitcoin: Rally expected to continue as BTC nears $100K
Bitcoin (BTC) reached a new all-time high of $99,419, just inches away from the $100K milestone and has rallied over 9% so far this week. This bullish momentum was supported by the rising Bitcoin spot Exchange Traded Funds (ETF), which accounted for over $2.8 billion inflow until Thursday. BlackRock and Grayscale’s recent launch of the Bitcoin ETF options also fueled the rally this week.
Best Forex Brokers with Low Spreads
VERIFIED Low spreads are crucial for reducing trading costs. Explore top Forex brokers offering competitive spreads and high leverage. Compare options for EUR/USD, GBP/USD, USD/JPY, and Gold.