Security incident · 2023-04-24
KuCoin
According to the public DefiLlama incident dataset, KuCoin suffered a security incident on 2023-04-24, with about $23K reported lost.
| Date | 2023-04-24 |
|---|---|
| Reported loss | $23K |
| Chain | — |
| Target type | CEX |
| Technique class | Social Engineering |
| Technique | Social Account Takeover |
| Bridge incident | No |
| Within 2023 | #184 by loss that year, 0.0% of all reported losses that year |
How this kind of attack works
The target was people rather than code: phishing sites, fake airdrops or impersonated staff led victims to sign or transfer themselves.
Would a pre-payment check have helped
Phishing and fake-airdrop hosts show up in public domain feeds, and some payee addresses are already listed. Screening the endpoint and the counterparty before paying catches part of this class.
Other incidents with the same technique
- Bybit2025-02-21 · $1.40B
- FTX2022-11-12 · $450.0M
- DMM Bitcoin2024-05-31 · $305.0M
- WazirX: India2024-07-18 · $234.9M
- Wintermute2022-09-20 · $160.0M
- Poloniex2023-11-10 · $126.0M