Peer-to-peer crypto exchange Remitano experienced large withdrawals of USDT, USDC and ANKR tokens on Thursday, leading some blockchain analysts to conclude that the platform was likely hacked.
At around 12:45 pm on Sept. 14, the exchange’s hot wallet began sending funds to an unknown address in multiple anomalous transactions, according to blockchain security firm Cyvers.
Suspicious address on ETH: https://t.co/mLLKGqUXrh
We specially appreciate the assistance of the @zachxbt
FYI: @tayvano_ @1nf0s3cpt— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) September 14, 2023
“We contacted the team to halt any additional losses and initiate efforts to recover suspected stolen funds,” said Cyvers after issuing the alert.
Analysis of the exploit by security firm PeckShield revealed that $2.7 million worth of crypto was drained from Remitano’s hot wallet on the Ethereum and Tron networks.
USDT issuer Tether has already frozen the two of the addresses associated with the alleged hack on both blockchains, potentially blocking the hackers from cashing out.
#PeckShieldAlert PeckShieldAlert #Remitano exchange experienced suspicious transactions, as over $2.7M was drained from its wallet on #Ethereum and #TRON.
Tether has frozen 2 addresses on both #Ethereum and #TRON the attacker allegedly used, potentially saving 2.7M $USDT.
The… pic.twitter.com/BulYe77PzH
— PeckShieldAlert (@PeckShieldAlert) September 15, 2023
However, PeckShield noted that the drainer on Ethereum had swapped the stolen USDC and ANKR for around $264,000 worth of ETH and transferred them to HitBTC.
Remitano is a Seychelles-based exchange that primarily serves users based in emerging markets, including Pakistan, Ghana, Venezuela, Vietnam, South Africa, and Nigeria. At the time of writing, the team had not put out any official statements acknowledging or confirming the exploit.
So far, there have been no leads on the hacker’s identity or the root cause of the exploit.