From 2011 to 2020, cyberattacks on crypto exchanges resulted in over $15.6 billion in theft, impacting over 50 platforms. This data comes from a comprehensive study conducted by Crystal Blockchain and Cointelegraph.
As published in the Forbes article, 27% of these digital assaults were primarily aimed at cryptocurrency exchanges, mainly due to weak security measures, especially those surrounding hot wallets. Moreover, some users were also victimized by exit scams orchestrated by the platforms’ operators.
Strategies implied by hackers targeting crypto exchanges
Traders Union identifies 3 popular and key tactics utilized by cybercriminals to compromise crypto exchanges:
- Cross-site scripting (XSS) attacks: Cybercriminals often exploit these vulnerabilities in online trading platforms to inject harmful codes into websites. This action can redirect users to unsafe third-party sites or infect their devices with malware, aiming to steal passwords or manipulate clipboard content.
- Misconfiguration: Web terminals frequently omit critical HTTP headers, essential for defending against cyber attacks. These headers include Content-Security-Policy (protects against content injection like XSS), X-Frame-Options (fights clickjacking), and Strict-Transport-Security (enforces secure HTTPS connections).
- Exchange code vulnerabilities: Although exchanges may uphold error-free code, Coverity Scan highlights that around 0.3 errors per 1000 lines of code can present security risks. Cybercriminals can exploit weaknesses in third-party software, such as payment gateways or operating systems, for phishing or malware attacks.
How SMS authentication works
TU analysts posit that knowing a person’s role in crypto trading or exchange administration, cybercriminals may manipulate their SMS for illicit authentication, employing diverse hacking tactics.
Here are some hacking methods:
- Wiretapping: Cybercriminals can intercept SMS messages using specialized equipment, infecting victims’ phones with malware or hacking service provider servers.
- SIM card cloning: Attackers can duplicate a victim’s SIM card to access their SMS messages unauthorizedly.
- False base station: By setting up a counterfeit base station, expensive equipment can be used to intercept and decrypt SMS messages.
- Carrier web platform hacking: Attackers can compromise a user’s account on the carrier’s web platform to redirect all messages to their contact details.
- SS7 attack: Unauthorized access to SMS messages can be gained by exploiting vulnerabilities in telecommunication protocols like PSTN, and PLMN.
Defensive strategies employed by crypto exchanges
TU experts highlight several security measures adopted by cryptocurrency platforms to thwart hacking attempts:
- Multi-factor authentication: This standard practice mandates users to input a one-time password, usually sent via email or phone, to validate transactions. Advanced versions may use specific applications like Google Authenticator.
- Multi-signature: Bitcoin wallets demand multiple keys held by distinct individuals for access, with effectiveness hinging on the independence of each signatory.
- Cold wallet storage: By distributing funds between hot and cold wallets, security is enhanced. Cold wallets, protected physically and often using multi-signature systems, should house the majority of funds.
- Bitcoin timelocks: These features add a waiting period for complete control, employing a two-stage security mechanism with two separate keys.
Best crypto exchanges in 2023
Traders Union presents their top five selections for cryptocurrency exchanges in 2023:
- Bybit: This platform, renowned for its specialization in cryptocurrency derivatives trading, specifically futures and perpetual contracts, holds a top position.
- OKEx: Standing out as a notable digital asset exchange, OKEx offers various trading services, including spot, futures, and options trading.
- Binance: Widely recognized globally, Binance provides spot, futures, and token trading services, maintaining its status as a leading cryptocurrency exchange.
- Huobi Global: This central digital asset trading platform offers various services, encompassing cryptocurrency, futures, options, and Forex trading.
- KuCoin: Renowned for its comprehensive services, KuCoin offers cryptocurrency trading, futures contracts, and Forex trading services.
Traders Union also offers insights through their Bittrex review. It highlights the exchange’s robust platform, a wide range of supported cryptocurrencies, and robust security measures, making it appealing to traders and investors.
Conclusion
In summary, the landscape of cryptocurrency trading is constantly evolving, bringing both opportunities and challenges. It is essential to stay informed about the latest trends, security measures, and high-performing platforms to thrive in this space. For a comprehensive analysis, reviews, and current information, visit the Traders Union website.
