
Coincheck’s computers then began transmitting data to external servers in the US and Europe for weeks leading up to midnight January 25. While Coincheck executives hinted at a possible malware-related compromise leading to the theft, a report by the Nikkei today revealed further details about the intrusion that began with phishing emails directed at Coincheck employees.Ĭiting a source close to the Tokyo Metropolitan Police Department’s ongoing investigation – over 100 police officers are reportedly deployed to look into the ase – English-language emails purporting to be an internal message deployed malware when clicked, enabling an external attacker to gain access to the computer(s). The claim was repeated during a press conference last week wherein the company’s chief executive and operations chief outlined the compensation plan on a day when the exchange was slapped by a ‘business improvement order’ by Japan’s financial regulator. Update: Updated to reflect the news that Coincheck will be issuing refunds to its affected customers.In the immediate aftermath of the attack, Coincheck promised to reimburse customers affected by the theft. The new regulations come to one of the most popular markets for cryptocurrency, at a time when cryptocurrency exchanges are poorly regulated worldwide.

#ILLICIT NEM TRANSFER COINCHECK LICENSE#
The theft comes after Coincheck applied for a license to operate as a cryptocurrency exchange in Japan. Gox exchange collapse that roiled cryptocurrency markets worldwide in 2014,” Bloomberg reports. “In Japan, one of the world’s biggest markets for cryptocurrencies, policymakers have introduced a licensing system to increase oversight of local venues, seeking to avoid a repeat of the Mt. The spike of interest enjoyed by bitcoin and other cryptocurrencies based on blockchain technology attracted a huge number of new investors, and that influx of cash has made cryptocurrency exchanges an appealing target for hackers. The Coincheck theft is just one of many high-profile cryptocurrency heists we’ve seen in the past few months. As such, they make more appealing targets than higher-security cryptocurrency wallets.Ĭold wallets are designed for long-term storage, and they’re typically not connected to the internet, which means physical access to the cold wallet should be carefully controlled - it’s your only way into those funds. If you’re unfamiliar, a hot wallet is like a checking account for cryptocurrencies - it’s designed to facilitate transfers, but it’s not meant for long-term storage. The hackers reportedly secured the private key for the wallet, which allowed them access to the NEM coins in question.

In total, the company is expected to spend about 46.3 billion Yen to refund its 260,000 customers who were affected by the theft.Īccording to Cointelegraph, the coins were stolen via a few transactions from a “hot wallet” in the early hours of the morning on Friday, January 26. In addition to putting a temporary halt to all transactions, The Guardian has reported that Coincheck will refund the stolen $400 million in NEM coins. co-founder Yusuke Otsuka said during a late-night press conference at the Tokyo Stock Exchange that the company didn’t know how the 500 million tokens went missing, but the firm is working to ensure the safety of all client assets,” Bloomberg reports.

“After hours of speculation, Coincheck Inc. In the meantime, Coincheck froze all deposits, withdrawals, and trading of NEM coins. It’s currently unknown exactly how the coins were stolen, but Japan’s Financial Services Agency is investigating the transfer. Fitbit Versa 3Ĭoincheck, one of Japan’s largest cryptocurrency exchanges, reported that about $400 million worth of NEM tokens, a cryptocurrency, were stolen by hackers when 500 million tokens were illicitly transferred to an unknown party.
