Bithumb $31 Million Crypto Exchange Hack: What We Know (And Don’t)

Coindesk | Wolfie Zhao | June 20, 2018

On Wednesday, roughly 35 billion Korean won (around $31 million) in cryptocurrency was stolen by hackers from the South Korea-based exchange Bithumb.

Although the breach may not be as severe as the $530 million hack of the Coincheck exchange earlier this year, the fact that Bithumb now ranks as the sixth biggest trading venue in the world still marks it as a notable, and worrying, incident.

While more details about the heist have surfaced in the hours following the event's confirmation, providing a glimpse into Bithumb's internal operations, some important questions about the hack still remain unanswered.

Here's what we know about the hack so far, and some details we still don't.

What we know

XRP compromised

While Bithumb has not yet disclosed full details of the stolen coins, news emerged following the hack that XRP, the native token of the XRP ledger and the world's third-largest cryptocurrency, has been targeted, according to a report from CoinDesk Korea.

Based on data from CoinMarketCap, Bithumb accounted for 10 percent of the global trading volume of XRP over the last 24 hours, with a total of $32 million-worth changing hands.

Bithumb has so far not responded to CoinDesk's request for comment.

IT improvement failed

While Bithumb officially confirmed the breach early Wednesday morning local time, it appears that security issues were already drawing attention from the exchange at least several days ago.

According to a follow-up report from CoinDesk Korea, Bithumb conducted a security enhancement checkup on June 16, just days before the confirmed hack.

The exchange explained at the time:

"Recently, the number of unauthorized access attempts has increased. As such, an urgent server checkup was conducted to strengthen the security of all system."

At the same time, Bithumb also started moving users' assets to a cold wallet to store cryptocurrencies in a more secure offline environment.

The CoinDesk Korea report indicated that the hack comes at a time when Bithumb is spending 10 billion won, or around $9 million dollars annually on security measures. Another report from Yonhap further suggests that Bithumb beefed up its security measures by implementing so-called "5.5.7 regulations" last month.

Under this requirement, at least 5 percent of a financial institution's staff should be IT specialists. Among those, 5 percent should focus on information security, while at least 7 percent of the firm's total budget should be on information security.

See:  The growing cost of cybersecurity

The report from Yonhap stated that 21 percent of Bithumb's employees are technology specialists as of May, and 10 percent of those are responsible for information security. Further, about eight percent of the annual spending budget is used for data protection activities.

Although Bithumb appears to have fulfilled the 5.5.7 requirements, the report said the fact that it has 300 employees means it may not be able to cope with the increasing amount of trading volume and user numbers on its platform.

Government weighs in

An hour before Bithumb confirmed the hack on its website and official Twitter account, the exchange reported the case to the Korea Internet & Security Agency (KISA), a government organization that supervises internet and cybersecurity issues in the country.

An official from KISA said a dedicated analysis team is currently in the process of investigation the hack. As of press time, the agency has not yet disclosed any details from its investigation so far.

Bithumb to refund users

Immediately after announcing the hack, Bithumb confirmed it will pay back victims using its own reserves.

Industry experts later weighed in, including bitcoin pioneer Charlie Shrem, who praised the move despite the unwelcome incident.

"Bithumb hacked for $30 million but covering all losses. Out industry is getting better and stronger," he tweeted.

In addition, litecoin creator Charlie Lee also commented that he believes the smart move is to "keep on exchange coins that you are actively trading. It's best to withdraw right after trading."

This is not the first time that Bithumb was reportedly hacked. As previously reported by CoinDesk, the platform was compromised last year with as many as 30,000 users impacted.

At that time, Bithumb later announced that it would repay each victim with 100,000 Korean won each, an amount worth about $85.

Bitcoin price dips by $200 

According to data from CoinDesk, the price of bitcoin dropped by nearly $200 to a daily low so far of $6,561 an hour after Bithumb initially published the statement. As of press time, the price had bounced back to $6,640.

In addition, as Bithumb has so far only suspended asset deposits and withdrawals, trading activity on the exchange actually appears to be increasing since the news broke. Based on data from CoinMarketCap, 24-hour trading volume was initially seen at around $350 million at the time of the news and later climbed to $380 million around noon local time on Wednesday.

Check out:  Prices Aside, Crypto’s Tech Stack Is Steadily Improving

As of press time, Bithumb still remains the sixth largest platform globally.

What we don't know

Extent of the breach

It appears that XRP is one of the assets stolen in the hack, yet it's still unclear at the moment if other assets have been taken and in what quantities. In addition, it's also not clear the number of users on Bithumb that have been impacted.

In its announcement, Bithumb refrained disclosing these details, adding that it may disclose the hacked tokens today. It has not made any statement on that at press time.

Further, it's not publicly known at this time which wallet addresses the hacked cryptocurrencies have been sent to, or whether any have been liquidated or not.

Currently, there are over 37 cryptocurrency assets on Bithumb that are available for trading against the Korean won. Among them, EOS and TRON together account for over half of the total trading volume on Bithumb, at 31 and 22 percent, respectively.

Continue to the full article --> here

 

 

Nov 12, 2026 Buying a Canadian money services business starts with identifying what the buyer will acquire: a legal entity, a registration history, contracts, records and possibly an active operation. The value of that package depends on whether it supports the services the new owner intends to provide. A FINTRAC registration entry is an important starting point. It does not establish the company’s financial condition, the quality of its compliance programme or the availability of banking relationships after an acquisition. A payment business may also need a separate assessment under the Retail Payment Activities Act, or RPAA. For investors evaluating a Canadian MSB company for sale, due diligence should connect registration status, actual activities, transaction structure and financial evidence before the parties agree a completion timetable. Verify the Canadian MSB registration and legal entity Begin with the target’s exact legal name, incorporation details, registration number and current status. Match the entity in the corporate documents to the entity in FINTRAC’s Money Services Business Registry. FINTRAC explicitly states that registration does not mean it endorses or licenses a business. It also states that it does not issue licences or certificates of registration. A sales presentation using the phrase “FINTRAC licence” should ...
AI illustration of a Canadian MSB acquisition due diligence checklist covering FINTRAC registration, RPAA compliance, ownership, financial review and banking relationships
November 12, 2026 | NCFA Fintech Market Insight | Digital Assets Blockchain And Tokenization, Capital Markets Infrastructure And Funding, Wealthtech Investing And Trading Strategy still runs a software business, but Bitcoin now dominates its assets and capital raising. MSCI no longer treats that balance as an index eligible operating company. November 11, 2026, MSCI confirmed Strategy’s removal from the MSCI USA and MSCI World indexes after the November 30 close under its new methodology for non operating companies. MSCI is one of the world’s largest index providers, and its benchmarks are followed by funds investing across global equity markets. Japan’s Metaplanet is also being removed from an MSCI index. MSCI has decided that Strategy no longer qualifies for its equity indexes because Bitcoin now dominates its assets and much of its capital raising. Strategy still sells software and reports operating revenue, but MSCI is drawing a line between a business that holds investment assets and one where those assets have become the main financial story. Why Is MSCI Removing Strategy From Its Indexes? MSCI first looked at a rule aimed specifically at digital asset treasury companies. It later dropped that proposal and change it's methodology to cover companies whose finances ...
AI illustration of Bitcoin and public company symbols representing Strategy’s removal from MSCI indexes and the financing model behind Bitcoin treasury companies
Nov 12, 2026 Crypto market cap is calculated by multiplying an asset's reference price by its circulating supply. A token priced at $2 with 50 million units circulating has a market cap of $100 million. The calculation estimates the value of that supply at the reference price; it does not total the money investors deposited. To understand a change in the ranking, examine both inputs and the provider's definitions. A larger number can result from price changes, supply changes, or revised reporting. Establish what the two inputs represent The arithmetic is simple, but neither input is self-explanatory. “Price” may be a reference assembled from selected trading pairs and venues, rather than the last transaction on the exchange you use. A provider may exclude observations or convert quote currencies. Two services can publish different estimates because their source selection and methods differ. Circulating supply is an estimate of units treated as available in the market under a provider's rules. It may differ from the number minted, the total recorded by a contract, or the maximum permitted under a protocol's current design. Locked balances, treasury allocations, burns, and scheduled releases require interpretation. A transparent methodology matters because identical arithmetic can still use ...
AI illustration of stacks of coins beside financial charts illustrating how cryptocurrency prices and circulating supply affect crypto market capitalization
November 11, 2026 | NCFA Fintech Market Insight | Artificial Intelligence And Data, Capital Markets Infrastructure And Funding, Risk Compliance And Regtech Financial firms are putting AI agents into production well before giving them broad financial authority. That creates time to set identity, permissions and transaction controls before autonomous execution becomes common. On November 11, 2026, Bank of England Financial Policy Committee external member Jonathan Hall used his final FPC speech to examine what happens when AI agents get more authority inside financial firms. A Bank of England and FCA survey of 196 firms found that 80% already deploy AI agents and another 14% plan to within 12 months. Only 2% reported agents with broad autonomy, and none of those were in trading and payments. Finance is adopting agents quickly, but firms are still keeping people and hard limits around the decisions that can change money, positions or customer outcomes. AI Agents Are In Finance But They Are Not Trading Alone The 2026 Bank of England and FCA survey separates four levels of authority: Decision support lets an agent recommend an action while a person decides and executes it. Constrained execution lets the agent act inside preset rules. Conditional autonomy ...
AI illustration of AI agents connected across a financial trading network, representing shared market behaviour, trading automation and financial stability risk
November 10, 2026 | NCFA Fintech Market Insight | Capital Markets Infrastructure And Funding, Entrepreneurs Startups Small Businesses, Equity Crowdfunding And Alternative Funding A small group of large rounds is carrying Canadian venture totals while deal count and growth stage financing remain well below recent norms. On November 10, 2026, the Canadian Venture Capital and Private Equity Association published its Q3 2026 venture capital report. Canadian companies raised $4.3 billion across 397 deals through September, only 1% less capital than a year earlier. But 23 rounds of $50 million or more represented just 6% of disclosed deals and absorbed 58% of all venture capital invested. Deal count has also fallen every year since 2021. The national total is holding up far better than the number of companies getting financed. Six Big Rounds Carried 59% Of Q3 Venture Capital Q3 produced $1.35 billion across 129 deals. Capital was 1% higher than Q2, but deal count fell 15%. Six rounds above $50 million accounted for $793 million, or 59% of the quarter’s capital. That's a decent quarter for the companies that closed those rounds, but a weak quarter for everyone else. Mega rounds above $50 million totalled $2.5 billion across 23 transactions ...
AI Illustration of large venture capital deals dominating smaller financings, representing concentration in Canada’s VC market
November 11, 2026 | NCFA Story Intelligence | Competition And Market Structure, Wealthtech Investing And Trading, Regulation And Policy Canada is cutting bank fees and switching barriers after years of weak competition, high concentration and poor productivity. On November 7, 2026, the federal government proposed something Canadian investors have complained about for years. Banks would no longer be allowed to charge most investment account transfer fees, which typically cost about $150 per account. Ottawa also wants clearer transfer information and tighter timelines for moving investments to another financial institution. The fee matters because leaving can already be slow and frustrating. Receiving firms often reimburse the outgoing charge to win the account. That means a fee collected by the institution losing the customer can become part of the acquisition cost for the institution trying to win that customer. Canada's six largest banks hold roughly 93% of banking assets. The Competition Bureau was warning about barriers facing fintech competitors in 2017. Ottawa began reviewing open banking in 2018. A federal advisory committee later recommended an operating system by January 2023 and warned that government should not delay. January 2023 came and went. Real Time Rail also slipped years beyond its first expected ...
Digital illustration of Canada bank transfer fee reform showing easier investment account switching, lower fees, open banking, payment infrastructure and stronger financial competition
November 10, 2026 | NCFA Fintech Market Insight | Digital Assets Blockchain And Tokenization, Capital Markets Infrastructure And Funding, Regulation And Policy Funds, Collateral And Settlement Lead Canada’s Near Term Tokenization Opportunity On November 10, 2026, the Canadian Securities Administrators published its Project Tokenization Phase 1 findings, setting out where Canadian market participants see the strongest commercial opportunities for tokenization and what regulators plan to test next. The report draws on 233 organizations, 21 bilateral meetings and 80 survey responses, along with workshops attended by 281 people in Calgary and 491 in Toronto. Participants put investment funds, private assets, collateral, treasury and settlement infrastructure ahead of public stocks as the strongest near term opportunities. The report also cuts through one of tokenization’s biggest sales pitches. Blockchain can change how an asset is recorded, transferred or settled, but it doesn't automatically create liquidity, investor demand, broader eligibility or stronger ownership rights. Those outcomes still depend on the product, market, legal structure and infrastructure around it. The CSA now plans to take specific projects into Phase 2 through a 120 day public call for proposals. Firms may be able to use existing regulatory processes, tailored regulatory treatment or bounded testing in a ...
Digital illustration of tokenized financial assets, blockchain settlement and legal infrastructure, representing Canada's investment funds and collateral markets.
Nov 11, 2026 A positive work environment is key for any team that wants to succeed. Team morale is crucial for productivity, motivation, and job satisfaction. Engaging in activities that lift spirits and strengthen connections can lead to great results. Creating a positive team environment requires creativity, engagement, and some fun. Each activity can strengthen connections, boost motivation, and improve workplace dynamics. When teams focus on strategies to boost morale, they work toward shared success. These activities can lead to lasting memories and help build a stronger team culture. Here are some fun strategies to help improve your team's morale and make the workplace livelier. Fun at the Arcade Visiting an arcade spot is a great way to enjoy time together and build teamwork. Imagine your team facing challenges with various games. Whether it's racing or playing team games, the arcade encourages friendly competition and bonding. These fun experiences can help reduce stress and improve relationships among coworkers. Arcades offer many options to suit diverse interests and skill levels. The lively atmosphere invites everyone to relax and take a break from their daily tasks. Shared laughter and enjoyment can lead to better communication and teamwork when you return to the ...
Digital illustration of team building activities boosting workplace morale with coworkers playing games and laughing in a bright modern office
November 10, 2026 | Market Activity | Fundraising, Investing, Trading, Leadership, Competition, Human Capital, Health A Brokerage Race Beyond $0 Commissions On November 10, 2026, Webull Canada added Nasdaq Basic Canada, giving clients free real time Level 1 quote and trade data across Canadian listed equities. The feed provides best bid, best offer and last sale information for stocks listed on the TSX, TSX Venture, CSE and Cboe Canada. Nasdaq says its consolidated feed can reduce Level 1 market data costs by more than 60% compared with traditional Canadian data packages. Webull isn't first to give Canadian investors free real time information. The more interesting story is how quickly another paid feature is becoming part of the basic brokerage account. Wealthsimple helped normalize $0 trading in 2019, Questrade followed in 2025 and Webull dropped its own commissions in April 2026. With the headline trading fee largely gone, brokers now need other reasons for investors to move money and keep it on the platform. Who Led Canada’s Race To $0 Trading And Free Market Data Wealthsimple Trade launched nationally on March 13, 2019 with $0 commissions on Canadian and U.S. stocks and ETFs. Questrade removed commissions on listed stocks and ETFs ...
AI illustration of Canadian online brokerage competition with racing cars promoting $0 commissions, free real time market data and transfer match bonuses
November 10, 2026 | Market Activity | Artificial Intelligence And Data, Capital Markets Infrastructure And Funding A Toronto Fintech Riskfuel Analytics Brings AI Pricing Into BBVA’s Global Markets Workflow On November 10, 2026, BBVA deployed Riskfuel Analytics' neural pricing technology inside the pre-trade structuring workflow for autocallable products on its ePricer platform. Riskfuel is a Toronto fintech founded in 2019 that builds AI models for derivatives pricing. BBVA is a global bank with a large corporate and investment banking business. The deployment puts Canadian built AI directly into the calculations used to design complex structured products at a major global bank. Riskfuel's model is trained on BBVA's own pricing engine and uses more than 4,000 market and product inputs. The company says the surrogate was tested against more than 100,000 trades and can evaluate thousands of candidate structures in under a minute. BBVA had already added AI generated investment ideas to ePricer in September. Riskfuel goes further into the workflow by speeding up the numerical pricing work while BBVA's own model remains the reference. How Riskfuel Speeds Up BBVA's Autocallable Pricing Autocallables can depend on volatility, interest rates, dividends, maturity, coupon levels and several barrier conditions. Autocallables are structured investments ...
AI illustration of AI powered derivatives pricing shown on a financial trading screen, illustrating Riskfuel technology used in BBVA structured product workflows

 


The National Crowdfunding & Fintech Association of Canada (NCFA Canada) is a cross-Canada non-profit actively engaged with cryptocurrency, blockchain, crowdfunding, alternative finance, fintech, P2P, ICO, and online investing stakeholders globally. NCFA Canada provides education, research, industry stewardship, services, and networking opportunities to thousands of members and subscribers and works closely with industry, government, academia, community and eco-system partners and affiliates to create a strong and vibrant crowdfunding and fintech industry. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: ncfacanada.org

Leave a Reply

Your email address will not be published. Required fields are marked *