First Update 19-Aug-2021
iquid’s Operations and Technology teams detected unauthorized access of some of the crypto wallets managed at Liquid.
Status of Liquid Services
- To ensure safety of funds, please do not deposit any crypto assets to your Liquid wallets until further notice.
- Liquid has halted all crypto withdrawals while we assess the impact.
- Fiat withdrawals and deposits remain available.
- Other services on Liquid, including trading and Liquid Earn, remain available.
Impact
The analysis of the impact is ongoing and is subject to change. Thus far we have determined the following data points:
- A total of approximately 91.35mm USDe of crypto assets were moved out of Liquid wallets by an unauthorized party.
- Of this amount, 16.13mm USDe of ERC-20 assets have been frozen (disabled for onchain movement) due to the assistance of the crypto community and other exchanges.
- 69 different crypto assets were misappropriated and sent to other exchanges or defi swapping venues.
- Assets placed in Liquid Earn are not impacted.
Liquid’s teams are still assessing the attack vector used and taking measures to mitigate the impact to users.
More information will be provided as it becomes available via Liquid Help Center & Liquid Global Twitter.
During this difficult period we greatly appreciate the support from our customers, other exchanges, security experts, and the broader crypto community. Liquid will continue to do everything in its power to mitigate the impact from this incident and restore full service as soon as possible.
These are the list of known addresses used by the un-authorised party:
Currency | Wallet Address |
BTC | 1Fx1bhbCwp5LU2gHxfRNiSHi1QSHwZLf7q |
ETH/ERC-20 | 0x5578840aae68682a9779623fa9e8714802b59946 |
ETH | 0x8762db106b2c2a0bccb3a80d1ed41273552616e8 |
ETH | 0xefb33ccafc98d5fdb27a6f5ff17350ca76bf3b53 |
ETH | 0xca0e7269600d353f70b14ad118a49575455c0f2f |
TRX | TSpcue3bDfZNTP1CutrRrDxRPeEvWhuXbp |
XRP | rfapBqj7rUkGju7oHTwBwhEyXgwkEM4yby |
Subsequent Movement Traced | |
BTC | 12PKkwoFkXp6JtN7roWRA2gSitE6nVDds4 |
BTC | 1JW1tcBXp1vZ6KGEirFNSXb5RgZSaL63Av |
ERC20 | 0xff0f573bdf4c23e41ea3ecd82efa66828706b711 |
ERC20 | 0x5d8ecef85058b33cc7130b975cfe07b548fee50a |
ERC20 | 0xD66D9EC7f0D89E0E6698953a7f44158552fbaf8f |
ERC20 | 0x262feb0550F3b6927ee5CBaa2fcfF77c1D270dbe |
ERC20 | 0xec06a00df7fe291c9f872449385bd593e38d8133 |
ERC20 | 0xaf9bdc92c920415cbcb8572a2dcb8aade778312b |
ERC20 | 0xD66D9EC7f0D89E0E6698953a7f44158552fbaf8f |
The following assets were moved from Liquid’s compromised warm wallets:
Currency | Amount (token units) |
1WO | 422,234.47 |
AAVE | 226.12 |
ALBT | 1,864,427.82 |
AMLT | 2,626,879.51 |
AMN | 5,604,056.42 |
ANCT | 10,096,863.10 |
BAAS | 10,023,709.46 |
BAT | 4,465.33 |
BFC | 1,063,271.82 |
BIFI | 142,993.29 |
BTC | 57.71 |
CEL | 804,775.54 |
COT | 43,179,685.23 |
CRPT | 416,030.51 |
DAI | 156,458.44 |
DENT | 7,827,882.54 |
DREAM | 41,189.77 |
ENJ | 54,750.41 |
ETH | 9,536.13 |
EWT | 483,158.00 |
FLIXX | 3,951,233.43 |
FLP | 1,981,736.75 |
FSN | 90,579.41 |
FTX | 1,219,995.16 |
GET | 190,806.41 |
GOM2 | 1,635,175.00 |
GYEN | 61,261,530.21 |
GZE | 760,511.43 |
IDRT | 1,604,850,918.37 |
ILK | 100,191,837.81 |
IND | 818,199.76 |
KRL | 2,127,152.44 |
LCX | 44,147,506.05 |
LINK | 12,978.05 |
LND | 3,216,461.32 |
LPT | 904.4 |
LTX | 217,757.60 |
MCO | 1,373.10 |
MITX | 2,103,607.28 |
MKR | 4.88 |
MTN | 1,269,920.54 |
MVL | 4,392,174.87 |
NII | 40,561,885.60 |
ONG | 452,195.30 |
PPP | 1,398,803.82 |
QASH | 1,829,927.49 |
QBZ | 5,158,115.56 |
REN | 22,788.62 |
RFOX | 44,379,216.85 |
ROOBEE | 6,148,058.40 |
RSR | 5,642,243.30 |
RSV | 81,470.73 |
SAND | 1,773,946.06 |
SNX | 44,568.25 |
SPDR | 3,009,229.82 |
TON | 19,125.99 |
TRX | 2,600,933.17 |
UBT | 288,435.82 |
UNI | 2,481.15 |
USDC | 2,408,963.25 |
USDT | 5,258,223.01 |
VI | 256,230.48 |
VIDY | 25,496,397.94 |
WABI | 149,216.96 |
WOM | 182,020.00 |
XNO | 49,192,867.48 |
XRP | 10,912,233.00 |
XSGD | 639,843.46 |
ZUSD | 299,805.48 |