It has been about a week since our 2019 year in review and since then, another major blow to the crypto community has taken place. VeChain, a blockchain project based in Singapore, reported that their buyback address had been compromised with the loss of 1.1 billion VET. The loss is valued at around $6.5 million USD.

What is VeChain?

VeChain founder, Sunny Lu.
Photo credit: Crypto Up Close

VeChain is a platform that uses a blockchain supply chain analysis system that helps clients around the world determine product quality. Some clients that support VeChain include Walmart China and BMW. Its blockchain is run through smart contracts with transaction fees being backed by its own tokens - VeChain (VET) and VeThor (VTHO).

The VeChain Hack: What Happened?

According to VeChain, the attack was most likely a result of human error and has since been corrected. They are also confident that this security hiccup in no way represents a flaw in their network or wallet procedures.

Since the breach, VeChain has released the address that the funds were transferred to in order to notify all other exchanges to halt any transactions coming in or out of it. They have also enlisted Hacken and local Singaporean law enforcement to aid in the investigation. More details can be found from their official statement.

December 22, 2019 Update

VeChain released a public statement today going over more details regarding the hack. Here's what they decided:

  • A vote will be held among all stakeholders on whether or not to burn all the VET tokens that were stolen and blocklist all blocked addresses.
  • CFO, Jay Zhang, will officially step down from his position and take a 50% salary cut for the year 2020.
  • CEO, Sunny Lu, will also take a 50% salary cut for the year 2020.

While it is unfortunate that this hack even happened in the first place, it is very commendable the way VeChain is handling the situation.

What Can We Learn from the VeChain Hack?

Currently, VeChain has a fixed supply of VET at around 86 billion tokens so the security breach only accounted for about 1% of its market cap. While it does not sound like a substantial amount, we feel that any sort of amount, big or small, should not be taken lightly. It is reassuring that they are being proactive about the situation and will hopefully bring good news in the coming weeks.

The crypto community has been no stranger to various hacks and scams over the past decade and while we would like to remain optimistic going into the new year, caution should always be exercised when investing. Between the exit scams and various hacks this year, our word of advice is to always take your tokens out of exchanges and put them into a hardware wallet. The risk of potentially losing your investments over someone else's mistake is just not worth it.

Latest Stories

すべて見る

Curated Yield: Earn Onchain USDC Yield on CoolWallet
  • by TeamProduct

アクティブ収益戦略:CoolWallet で USDC のオンチェーン収益を得る

CoolWallet の アクティブ収益戦略で、USDC からオンチェーン収益を獲得。Gauntlet がキュレーションするリスク管理戦略 Gauntlet USD Alpha に供給され、自動複利・セルフカストディ・いつでも引き出し可能です。

もっと読むアクティブ収益戦略:CoolWallet で USDC のオンチェーン収益を得るについて

Can Hardware Wallets Be Tampered With? How CoolWallet Fights Hardware Implants
  • by CoolWalletTeam

ハードウェアウォレットも改ざんされる?サプライチェーン攻撃から考えるCoolWalletの不正チップ埋め込み対策

(画像出典: 元Mt. Gox CEOのMark Karpelès氏が公開したLedger Nano Xの分解写真。内部で発見された不正なハードウェアインプラントとみられる部品を示しています。/Mark Karpelès (@MagicalTux) / X)

最近、一部のLedgerユーザーから暗号資産の不正流出が報告され、ハードウェアウォレットのサプライチェーンにおけるセキュリティリスクが注目されています。

公開情報によると、Ledgerは東南アジアの販売代理店CryptoBilisを通じて製品を購入したユーザーの資産流出について調査を進めており、同代理店に対して製品の販売および出荷を一時停止するよう要請しています。

具体的な攻撃手法、被害の範囲、責任の所在については、引き続き調査が必要です。

今回の事例は、重要なセキュリティ上の課題を示しています。

ハードウェアウォレットの安全性は、秘密鍵を保護するセキュアチップだけでなく、製品がユーザーの手元に届くまでに物理的な改ざんを受ける可能性も考慮する必要があります。

もっと読むハードウェアウォレットも改ざんされる?サプライチェーン攻撃から考えるCoolWalletの不正チップ埋め込み対策について

CoolWallet Go Pairing Password: What It Is and Why It Matters
  • by TeamProduct

CoolWallet Go Pairing Password: What It Is and Why It Matters

When you set up a wallet on CoolWallet Go, you create an 8-digit pairing password. You may rarely use it in your day-to-day life, but it plays an important role in keeping your assets safe. Here's what it does and how to keep it safe.

もっと読むCoolWallet Go Pairing Password: What It Is and Why It Mattersについて