How WOO X Was Hacked? Phishing Attack Leads to $14M Crypto Loss

Crypto-based hacks have been happening recently a lot more than ever, and the latest addition to them is the WOO X exchange incident, in which the hackers looted around $14 million through a phishing attack.

Rather than targeting the users, the phishing attack was on the members of the development team, which makes the hack a far more serious one. According to WOO X, the hack affected 9 user accounts, in which withdrawals were placed without their knowledge. However, the attack was immediately stopped by halting the withdrawals.

This is the third major crypto-driven hack this month, and the total loss has crossed $3.1 billion this year. The Bybit hack that happened in February, in which more than $1.4 billion was stolen by cybercriminals, is the largest in blockchain history.

About WOO X

WOO X is a centralised crypto exchange that offers a wide range of cryptocurrencies and other digital assets. It has advanced trading tools and superior liquidity, with options for staking and yield generation. The WOO ecosystem was launched in 2021, and it is registered in Seychelles for a favourable regulatory environment.

How the WOO X Phishing Attack Began?

WOO X investigated the hack and found that it began from a targeted phishing attack on the device of a team member. The attack allowed the hackers to exploit the development environment of WOO X.

While various pre-built security measures prevented the hackers from exploiting the entire system, some loopholes allowed them to ignite a series of withdrawals. Following the reveal of the incident, WOOX immediately suspended all withdrawals temporarily.

Who is Behind the WOO X Hack? The Investigation So Far

The incident was quickly detected, but the details about the hackers have not yet been obtained. Only the wallets in which they have withdrawn the funds are identified at the moment. The withdrawal addresses of the perpetrators are:

• 0x889b49ef0bf787c3ddc2950bfc7d1d439320004b
• 0x77167f0bc412eb39d004f354869938e7c5acd518

WOO X Hack Raises Serious Security Concerns

One major issue behind the unauthorised withdrawal was the lack of strict security measures for withdrawal. Also, the employees’ ignorance about security measures contributed to the issue. Online platforms, especially the crypto exchanges, which are prone to attacks all the time, should make sure they have:

Multi-Factor Authentication (MFA)

Instead of just passwords, generating strong security measures using biometric scans, multiple authentication factors, and hardware tokens will stop unauthorised withdrawals.

End-to-End Encryption for Financial Data

Users’ private data, especially the sensitive information regarding the financial assets, should have an end-to-end encryption that restricts third parties from accessing it.

Real-Time Monitoring and Threat Detection

The immediate restriction of withdrawals helped the WOO X exchange avoid the severity of the hack. However, real-time threat detection could have resulted in zero loss. All exchanges should employ real-time monitoring and threat detection.

Regular Security Audits

Security audits in regular intervals will add an extra layer of protection to the funds and the user data. It also increases transparency and user trust.

What’s Next for WOO X? The Recovery of Funds

WOO X Exchange clarified on X (Twitter) that the user funds are covered. Since the weak security measures and ignorance from the developer team and employees are some of the reasons responsible for the hack, the user funds should be replaced immediately. WOO X has done that, but the recovery of funds from the wallets of the hackers will probably take time, or else it will be lost forever.

The historical data show that most of the hacked funds have not recovered yet, mainly due to the decentralised nature of blockchain technology. The Bybit hack, which resulted in the loss of approximately 447,000 ETH, is still struggling to recover the funds. According to the latest reports, they were able to recover only 15,000 cmETH.

Recommended Reading: How to Keep Your Crypto Safe From Cyberattacks?

Concluding Thoughts

With the increase in the number of crypto-based crimes, the global blockchain communities, instead of carrying the burden on their own, are looking for advanced security measures and centralised regulatory frameworks from governments. The filing and passing of new crypto-based bills in the U.S. and other countries are expected to bring more security for the industry soon, making it a hybrid form of centralised and decentralised services.