Indian Cryptocurrency Platform WazirX Security Breach Leads To $230 Million Withdrawal; Issues Statement

Indian cryptocurrency exchange WazirX experienced a significant security breach early Thursday during European trading hours. The breach resulted in the loss of over $230 million in user funds, prompting immediate withdrawals and raising concerns about the security of crypto assets on the platform.

WazirX revealed that the breach targeted one of its multisig wallets, a type of cryptocurrency wallet that requires multiple private keys to authorize transactions. The exchange responded swiftly by pausing all INR and crypto withdrawals to prevent further losses. "We're aware that one of our multisig wallets has experienced a security breach. Our team is actively investigating the incident. To ensure the safety of your assets, INR and crypto withdrawals will be temporarily paused. Thank you for your patience and understanding. We'll keep you posted with further updates," WazirX stated in a post on X (formerly known as Twitter).

Blockchain data analysis by Lookonchain indicated that the breach led to outflows of various cryptocurrencies. The largest loss was over $100 million worth of Shiba Inu (SHIB) tokens, followed by $52 million in Ether (ETH), $11 million in Matic's MATIC, and $6 million in Pepe (PEPE).

The transactional data further showed that the exploiter has been actively selling the stolen assets on the decentralized exchange Uniswap. Notably, while the exploiter has not yet sold their ETH holdings, they currently possess over $4.2 million in FLOKI tokens.

The exchange has temporarily suspended all withdrawals and has identified two more exploited smart contracts. "We have identified 2 more exploited smart contracts. Our team is still investigating the incident. For the time being, we have opened up a secluded website to revoke all approvals. Your funds are at risk until you revoke," the firm added in its communications.

The creation of a dedicated website to revoke approvals is a proactive step by WazirX to mitigate further risks and protect user funds. However, the incident has already caused significant disruption and anxiety among its user base.

Multisig wallets are generally considered to be more secure than single-signature wallets because they require multiple private keys for transaction authorization. This added layer of security is meant to prevent unauthorized transactions. However, the WazirX breach highlights that even multisig wallets are not immune to sophisticated attacks.

The breach underscores the need for continuous improvement in security measures and protocols in the rapidly evolving crypto space. Exchanges must stay ahead of potential vulnerabilities and ensure robust defences to protect user assets.

WazirX is a prominent player in the Indian crypto market, registered with the Financial Intelligence Unit (FIU). This registration allows the exchange to offer crypto services to Indian citizens legally. According to CoinGecko data, WazirX facilitated at least $2.2 million in trading volume over the past 24 hours, with the majority of transactions involving tether (USDT) stablecoins and XRP.

The breach has undoubtedly dealt a blow to WazirX's reputation and trustworthiness among its users. The incident also raises broader questions about the security of cryptocurrency exchanges in India, especially as the market continues to grow and attract new investors.

The exchange has assured users that it will provide regular updates and take all necessary steps to safeguard their assets. The broader crypto community will be watching closely to see how WazirX handles the aftermath of this significant breach and whether it can restore confidence.