Kipcoin Hack

REPORTED LOSS $728K
Low Access Control bitcoin

What happened

The Chinese Bitcoin exchange Kipcoin announced that it lost some or all of its user’s bitcoins and will temporarily be shutting down. The exchange claimed to have lost over 3000 bitcoins in the hack. The announcement was made on the site’s Weibo page.

The hacker apparently gained access to Kipcoin’s server back in May and downloaded the wallet.dat file at that time. For months, according to Kipcoin, the hacker did nothing with the funds before beginning to move them in December 2014. It is not clear why the site didn’t secure its funds at that time.

The addresses Kipcoin claimed belong to the hacker:

1Chg6NxMeTcZ3DQvYA9gocjU4RQwH1LtKD

18zf9CWe4uBy8BesHU3BWqjpibDRRBoPLD

1MYkHXvnWuZ5FaMJkNv4uCLoVC2Ztp2DXK

152BSsbpcGMdj9WBGHq3wXHgJVuqQCs4aJ

16j131w3cvkdAc13sg5nREMiiJj3zoRw5n

16qHXy4RDeek56mNDN84d2F6niE96taQso

175L5Sx81dZZBureP8RtLUyUXoruVdAj1E

17ZJ1sqDRxq7oRVrnNLxoyrvHrtrjtPRfp

17amdMD8JJPcipWqUEwzEtsAuYu1FzkVtg

181qVdiaCcJmzGJV9PEobeYYnkC25PyJdT

18ncsALSWGWRG3JK6yio4PXoiWBbvxAxng

1XgAzaQEe9iDEohWCmdNXSH8XZ74uLBnd

Case & protocol details

Classification CeFi / Key Compromise
Protocol Type Exploit/Access control
Official Website kipcoin.com/

Evidence & learning

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.