Coincheck, una importante casa de cambio de criptomonedas fue vulnerada. Las fallas de seguridad que propiciaron este incidente, dónde están los fondos y la solución que ofrece la empresa.
Coincheck, una de las casas de cambio de criptomonedas más grandes de Japón, sufrió un robo valuado en USD 534 millones. Los analistas ya lo catalogan como el robo más grande de la historia por la magnitud y repercusiones que tuvo.
1. Cuándo ocurrió
El incidente ocurrió el viernes, pero recién se supo ocho horas después. Los activos hackeados fueron NEM (XEM), que se encuentra entre las 10 monedas virtuales más valiosas, según su capitalización de mercado.
2. La casa de cambio no tenía licencia vigente para operar
Coincheck comenzó a funcionar en 2014 y cuenta con unos 80 empleados. Está ubicada en el distrito de Shibuya, un popular barrio de Tokio. Según publicó Bloomberg, no contaba con la licencia necesaria para operar en criptomonedas, un nuevo requisito impuesto por la legislatura de Tokio y que es parte de una medida legislativa que apunta a auditar, más de cerca, las casas de cambio de este tipo.
De todos modos, la compañía había recibido permiso para seguir funcionando mientras esperaba una determinación por parte de la Agencia de Servicios Financieros. Esta entidad ahora penalizará a Coincheck por este incidente.
3. Cómo ocurrió
Los activos afectados estaban guardados en billeteras calientes (hot wallets), tal como se denomina a los monederos que están conectados a redes externas. En contraposición, las billeteras frías (cold wallets) son dispositivos que no están conectados a la red, por lo tanto, se supone que los activos almacenados de este modo son menos vulnerables a los ciberataques.
Por otra parte, Coincheck carecía de una medida de seguridad fundamental, como es la la multifirma, que requiere de varias firmas o permisos antes de autorizar un movimiento de fondos.
4. Ya se sabe dónde están los fondos robados
Coincheck identificó las direcciones adonde fueron a parar los fondos robados, y se puede ver ingresando aquí. No se sabe a quiénes pertenecen esas cuentas, pero desarrolladores de NEM crearon una herramienta que permitiría rastrear automáticamente cualquier operación realizada con los fondos robados.
Otra posibilidad para detener cualquier operación con esas monedas sería la de crear una bifurcación o fork que partiera la divisa en dos: una previa al robo y otra posterior a ese suceso. De todos modos, el vicepresidente, Jeff McDonald, aseguró que no se contempla llevar adelante esta opción.
5. La solución que ofrece la empresa
Como respuesta a este incidente, la compañía congeló los depósitos y extracciones. Además, se comprometió a compensar a los 260 mil usuarios afectados: cada uno recibirá el valor de sus depósitos hackeados en yenes, a un valor aproximado de 83 USD por cada moneda virtual, según publicó la empresa en su sitio.
6. No es la primera vez que ocurre
En diciembre hubo un hackeo a NiceHash valuado en más de 64 millones de dólares y que despertó una alerta generalizada. No el primer ni único incidente de este tipo, aunque quizás tuvo más repercusión que otros ataques, porque el año pasado la criptomonedas comenzaron a cobrar mayor importancia, luego de que bitcoin tuviera un pico histórico de 20 mil dólares.
En 2014, la casa Mt.Gox sufrió un ataque por un valor de 460 millones de dólares, que fue el resultado de falta de experiencia y pericia en la gestión de los activos virtuales. El resultado: escándalo y bancarrota.
Habrá qué ver qué futuro le depara a Coincheck. Quizá logre salir airoso del incidente, tal como lo hizo Bitfinex, una casa de cambio que logró superar un hackeo por 69 millones de dólares en bitcoins ocurrido en 2016.
7. El aprendizaje que deja este megarobo
Este incidente, como otros, deja en claro que los usuarios deberían tomar precauciones a la hora de guardar sus criptomonedas. Si bien pueden recurrir a las casas de cambio para operar y hacer transacciones, deben saber que no necesariamente tengan que guardar sus activos allí: tienen la opción de elegir entre diferentes billeteras, tanto online como offline.
Hmm is anyone else experiencing problems with the images on this blog loading?
I’m trying to determine if its a problem on my end or if it’s the blog.
Any suggestions would be greatly appreciated.
Aside from the generous welcome bonuses, the mpst
effective Wild Casino bonus code is «HUMPDAY2», which provides you a 50% deposit match of up to $150.
Here is my web blog – get more info
Appear foor an on-line casino oversesn by a respected regulator,
such as the UK Gammbling Commission, the Malta Gaming Authority or thhe Swedish Spelinspektionen.
Also visit my web-site :: https://caryv.blog-gold.com/
The welcome bonus consist of five deposit-match bonuses
of up to $1000.
Feel free to vissit my weeb bllg gawit.pointblog.net
Be the first to discover out about new games, dinner
and entertainment deals along with the thrilling headlines coming our way.
Visit my page homepage
As previously pointed out, these pages are frequently reviewed and updated to co align with the current gambling landscape.
My web-site; onlygo.us
You will really feel as even though you aare entering a new casino web site universe aand a paradise on the seas when you enter Las Atlantis Casino.
In Japan, element-time and temporary workers account for
nearly 40% of the workforce but have historically been ignored by the country’s trade unions.
my homepage … 여성밤알바
When you win a jackpot on Jackpot.com, there are no
further fees or commissions beyond what you initially paiud to play.
My blog post :: 파워볼분석
Deposit solutions and associated services are
supplied byy JPMorgan Chase Bank, N.A. Member FDIC.
My site … 추가 대출
They also offer a complete suite of solutions covering sports, casino, bingo and poker.
Feel free to visit my web blog … get more info
This can make for an exciting and dynamic betting practical experience though watching thee game.
my wweb site – click here
There aree over 60 sports to choose from, with a lot
of championships and leagues.
my blog :: check here
If you’re attending in individual,you’ll also
gain access to the recordings to rewatch your favourite sessions.
My page – 파워볼분석
The stress can come in many types, like economic, academic, familial, and cosmetic.
My website 유흥업소 알바
As a result, your fees will be $70, and you will have to repay a total
of $320.96.
My website: 신용대출
William Hill was aawarded the ideal market place choice at
the UK Bookmaker Awards.
Heere is my webpage … 메이저토토사이트
The factors that some wirkers take element-time hours
show that the “voluntary” label is a bit of a misnomer.
Also vusit my web page 노래방 알바
As for the jagged rebound, labor and employment lawyer Rumack observed «a transient nature to the workforce» proper
now.
Look at my site – 언니 알바
You can also checkcash advances apps likje Dave for fast exact
same day loans.
Also visit my blog post :: 소액대출나라
That iss not to say, even so, that Europe has accomplished workplace equality.
Feel free to surf to my web-site :: 밤일알바
You can also store the information you have on your mobile
devce and share them wirh everyone.
Also visit my site; 동행복권 파워볼
A multi-faceted plan for collaborating with payment system
stakeholders to boost the speed, safety and efficiency of the U.S.
payment technique.
Here is my webpage 파워볼분석
This mared tthe highest ratio of voluntary to involuntary
element-time employment inn two decades.
Stop by my webpage: 이지알바
Why is there so significantly talk of job development, unfilled vacancies annd a labor shortage suitable now?
Here is myy website … 유흥알바
At the latter schools, pupils «are surrounded by young children from a singular background», says
Mr Tertitsky.
Stop by my blog … 여성알바
I jumped in with open arms saying, “Yes, I will doo it.” Even though
I am deathly afraid off heights, but it’s a
excellent chance.
Here is my website; 대출 직빵
In July last year, frustrated with thhe delay, they even protested at Maitighar Mandala.
Also visit mmy website :: 마사지 알바
I just copy and paaste thhe entire page’s content and ask it forr a
handful of headlines that rhyme.
Feel free to visit my pae 유흥알바
California is dwelling to severfal iconic golf courses with a history of hosting main tournaments,
like Pebble Beach.
my web site 토토사이트검증
HKUST’s reputation, expansive network, annd links too her employer also attracted Scarlett
to the business enterprise school.
My page – 여성 알바
So let’s appar at the top gambling web-sites in thhe UK that excel in these criteria.
Take a look at my page … 토토사이트
Phuyal says he has a bachelor’s degree,
but he does not see a future for himself iin Nepal.
Stop by my blog; 셔츠룸알바
For roughly two in five job seekers in our survey,
fear of contracting COVID-19 is prime of thoughts.
Feel free to surf to my site :: web page
But he wwas unaware of the time and work it would call for to land a Korean job.
My pagbe … webpage
I don’t even know how I finished up here, however I thought this submit was once
good. I don’t understand who you might be however certainly you are going to a
famous blogger should you are not already. Cheers!
Set up as several tickets each and every draw as you would like by ppicking the Number
of Plays.
Feel free to visit my blog post … 파워볼분석
Basically, the opinion determined the Wire Act only applies to sports betting annd ceared the way for states to regulate online lotteries, casinos, and poker.
Herre is my web blog: 파워볼게임
That is, tthey market the drawings with signage and help make the buzz that suyrrounds a major
jackpot.
My weeb blog – 비트파워볼
There are nno promotional needs to attain the subsewquent level
other than showing up to operate.
My page: website
Free of charge spins will have ann assigned value on them, and iit
is normally £0.10.
Also visit my web page :: 바카라사이트
Our spacious venuess deliver excellent sound, mesmerizing visuals, and unforgettable memories.
Here is my blog post: more info
The steongest job gains last month in Calgazry came iin the wholesale and retail trade and informafion and facts sector, as wrll as culture and recreation, according to CED.
my page :: 여성 유흥알바
Nice response in return of this issue with solid arguments and describing all on the topic of
that.
When it comes to playing casino games, the Bet US casino delivers a fantastic choice.
Also visit my blog … https://yrmnn.wikipublicist.com
I wanted to thank you for this fantastic read!! I absolutely
enjoyed every bit of it. I have you book marked to check out new
stuff you post…
What’s up to every one, because I am genuinely eager of reading this webpage’s post to be updated regularly.
It includes fastidious information.
Cheers. Fantastic information!
With thanks. Very good information.