BtcTurk Hacker Strikes Again, Targeting Another Crypto Platform!

Turkey’s leading cryptocurrency exchange, BtcTurk, revealed today that it suffered a cyberattack, resulting in the compromise of 10 hot wallets. While specific details about the affected assets and the total amount stolen have not been disclosed, the impact of this breach has been significant. Soon after the attack, on-chain detective ZachXBT reported that the hacker had moved on to target another crypto platform.

BtcTurk Hacker Targets Another Platform

Shortly after the attack on BtcTurk, the same hacker launched an assault on another crypto platform. On-chain detective ZachXBT announced that the hacker managed to steal over $2.9 million from a platform named Sportsbet. ZachXBT provided insights into the movements of the stolen funds, stating:

“Online casino Sportsbet was likely hacked by the same threat actor who breached BtcTurk, stealing over $2.9 million. The stolen funds were mixed together.”

Advertisement Banner

BtcTurk Hack Triggers Massive AVAX Sell-Off

In a statement on its status page, BtcTurk reassured users that their crypto assets remained secure despite the hack. The exchange emphasized its financial resilience, clarifying that only a portion of the hot wallet balances in ten cryptocurrencies was affected, while the majority of assets in cold storage were safe.

The hack coincided with a notable 10% drop in the price of Avalanche’s native token, AVAX. Blockchain analyst ZachXBT reported that approximately 1.96 million AVAX tokens, worth $54.2 million, were transferred to multiple exchanges, including Coinbase, Binance, Gate, and THORChain. His analysis suggested that the stolen AVAX tokens might have been exchanged for Bitcoin, leading to a price drop below $25, the lowest in six months, before a slight recovery to $26.

Crypto Exchange Initiates Investigation

Following the breach, BtcTurk temporarily suspended crypto deposits and withdrawals on its platform. The exchange urged users to be patient and announced that it had launched an investigation into the incident. Highlighting the limitations of Know Your Customer (KYC) and compliance regulations, ZachXBT pointed out that some exchanges might overlook critical security threats despite adhering to these regulations. He stated:

“The harsh reality of KYC and compliance is that they are often ineffective against real threats, whether the exchanges are regulated or offshore. This isn’t necessarily the fault of the exchanges; they are simply trying to comply with laws and regulations. The key difference lies in exchanges that build teams to respond to ongoing threats and remain open to feedback. Some ‘regulated’ exchanges are completely unaware of real issues.”