Connect with us

Market

The Survival Story of FixedFloat

Published

on


In February, the decentralized cryptocurrency exchange FixedFloat experienced a drainer attack, resulting in the loss of over $26 million worth of Bitcoin (BTC) and Ethereum (ETH). By late March, the exchange suffered a second exploit, leading to an additional loss of $2.8 million.

A few months later, FixedFloat shared the details of these incidents and ongoing investigation with BeInCrypto.

FixedFloat has been hacked twice this year. How did this happen?

The first hack occurred on the night of February 16-17. This was an external attack caused by vulnerabilities in our security structure. A hacker exploited a vulnerability in our security and was able to gain access to some of FixedFloat’s functions. The second breach took place on March 31, where the hacker exploited a vulnerability in a third-party service we were using at the time.

Was the second hack committed by the same hacker who committed the previous hack, or was it a different attacker?

We believe the same hacker committed both hacks because the attacks originated from the same IP address. We cannot provide all the details at the moment. However, we can report that hackers possess a large number of compromised servers.

On some of these servers, they have deployed the infrastructure for attacks. They likely did not store evidence on their own devices, instead using third-party servers. The hackers utilized numerous unique IP addresses; however, some were used to launch both attacks.

Do you have information about who exactly is behind the hacks?

We have been using Time4VPS hosting for a long time. This is a fairly large web hosting provider in Europe, operating since 2012. We chose Time4VPS for our purposes, since this hosting offers fairly cheap servers with low performance. This was a convenient and profitable option for implementing some technical solutions at the initial stage of development of our project.

Over the past years, we have migrated our subservers and wallets. At the beginning of 2024, several low-power nodes with wallets and some subsystems remained on the Time4VPS server. After the first hack, the hacker discovered the IP address of one of our technical servers rented from Time4VPS.

How did the hacker use the information?

The hacker logged into all our servers, rented from Time4VPS hosting, simultaneously, despite knowing only one IP address. We immediately changed all passwords on servers and accounts, but the hacker quickly changed the passwords again. We found a solution to prevent server authorization and started transitioning from this hosting provider.

However, the hacker gained access to all hoster functions, including global access to all servers, rendering our solutions ineffective. The hacker changed the account email to an invalid one, preventing us from logging in or receiving password change notifications. They connected to the servers without authorization.

At this point, we realized the need to destroy the servers and remove them from the whitelists immediately. Our delay in doing so allowed the hacker to send requests that enabled them to steal funds.

Peckshield report
Peckshield Report on First Hack. Source: Peckshield

Have you contacted Time4VPS support?

On March 31, immediately after discovering unauthorized access to our servers, we contacted Time4VPS to report the hack. We were extremely surprised by their inaction. Technical support informed us that the technicians had the day off and could not assist us. The following day, the Time4VPS team remained inactive. They merely advised us to change the passwords on our account.

We eventually convinced them to verify that certain actions could not be performed through their personal account. Only then did they confirm the hack and promise to provide a report on the incident the next day.

Have you received a hack report from Time4VPS?

More than three months have passed, and there is still no report from Time4VPS. Instead, they requested that we provide some documents through their system. We refused because Time4VPS representatives have not confirmed that they found and fixed the vulnerability. Their demands have created the risk of another information leak.

We agreed to cooperate only with the direct involvement of law enforcement or after they confirmed the vulnerability had been corrected. Additionally, our lawyer was prepared to provide the necessary documents directly at the company’s office to receive reports and assistance. However, Time4VPS management rejected this offer.

Why do you think Time4VPS was inactive at the time of the hack and did not provide assistance after it?

We do not exclude the possibility that a hoster’s employee could have facilitated the hacking. However, we are more inclined to believe that Time4VPS and the Lithuanian company behind it are simply careless. We believe the hoster’s critical vulnerabilities remain unfixed, leaving all their clients’ data unprotected from hacker attacks.

Did the hack impact your customers?

This incident caused problems not only for us but also for our users. As soon as we detected the hack, we turned off FixedFloat and suspended all ongoing exchanges.

FixedFloat is an automated, non-custodial, centralized cryptocurrency exchange service, so we don’t store our users’ funds. Additionally, FixedFloat is not a cryptocurrency mixer. We send funds to exchanges only from our addresses, and this information is public.

Due to the hack, we had obligations to clients who made exchanges at that time. We have since fulfilled all obligations to our users, and completed all orders that stopped due to the service outage. Only our service suffered from the hacking and theft of funds.

What measures did you take after the hack?

The first breach was due to a security vulnerability, which we have since fixed. Unfortunately, we did not anticipate an attack from third parties. Following the second hack, our service was under maintenance for over two months. During this period, our specialists worked extensively to enhance our infrastructure and protect against such attacks.

We have radically revised our security system. This included conducting a comprehensive audit, implementing additional security measures, and improving our threat detection and prevention systems.

Have you completed the technical work?

Yes, FixedFloat has resumed operations. Most cryptocurrencies are already available for exchange, and our specialists are working on adding new currencies. We have been providing high-quality, convenient, and fast cryptocurrency exchange services for six years, and we intend to continue our work.

From a hack survivor perspective, can you give a few recommendations to other platforms and its users on how to increase security?

As a service that has experienced two hacks for different reasons, we’d recommend the following:

  • Conduct frequent audits of your security systems. Identify and address all vulnerabilities promptly.
  • Plan for Provider Vulnerabilities. The second hack exploited a vulnerability in our hosting provider, Time4VPS. Platforms should anticipate such scenarios and have a robust procedure for dealing with service provider hacks.
  • Always prioritize user safety. Implement strict security measures and protocols to protect user data and funds.

What steps are you taking to regain the trust of your users following these accidents?

We are actively engaging with our users through various communication channels, including social networks and forums. This allows us to inform them about the changes we have made. Currently, not all users are aware that FixedFloat has resumed operations, but we are working to spread this information.

We understand that many were concerned about the hack’s impact on our users. However, we emphasize that we are a non-custodial service and do not store user funds. Orders that were not fulfilled due to the emergency shutdown have been completed. At present, we have no financial obligations to our users.

Disclaimer

In compliance with the Trust Project guidelines, this opinion article presents the author’s perspective and may not necessarily reflect the views of BeInCrypto. BeInCrypto remains committed to transparent reporting and upholding the highest standards of journalism. Readers are advised to verify information independently and consult with a professional before making decisions based on this content.  Please note that our Terms and ConditionsPrivacy Policy, and Disclaimers have been updated.



Source link

Market

XRP Bears Lead, But Bulls Protect Key Price Zone

Published

on


XRP has experienced a significant downturn in recent price action, with its value dropping nearly 15% over the past seven days as bears maintain control of the market. The coin’s technical indicators are showing mixed signals, with the RSI rebounding from oversold territory while Ichimoku Cloud patterns continue to paint a predominantly bearish picture.

Despite yesterday’s test of the critical $2.06 support level resulting in a temporary bounce, the momentum remains negative, with short-term EMAs positioned below long-term averages. The move from extreme oversold conditions suggests XRP might be entering a consolidation phase before its next significant price movement.

XRP RSI Is Up From Oversold Levels

XRP’s Relative Strength Index (RSI) is currently at 36.37, showing a notable rebound from a low of 27.49 just a few hours ago. This upward shift indicates a shift in momentum, as buying interest has started to pick up after a period of heavy selling pressure.

Although still in the lower range, this recovery suggests that traders may be stepping back in. That could mean they are potentially viewing the recent dip as an opportunity.

XRP RSI.
XRP RSI. Source: TradingView.

RSI is a widely used momentum indicator that measures the speed and change of price movements on a scale from 0 to 100. Readings below 30 typically indicate that an asset is oversold and may be undervalued, while readings above 70 suggest it is overbought and could be due for a correction.

XRP’s bounce from 27.49 to 36.37 signals that it may have just exited oversold conditions. This could mean that the recent selling phase is easing. If the buying momentum continues to build, XRP might be entering the early stages of a potential recovery.

XRP Ichimoku Cloud Shows A Bearish Scenario

XRP’s Ichimoku Cloud chart shows that the price action remains below both the red baseline (Kijun-sen) and the blue conversion line (Tenkan-sen). That indicates the prevailing momentum is still bearish.

The candles are also forming well beneath the cloud, which reflects a broader downtrend.

When the price is under all major Ichimoku components like this, it typically signals continued downward pressure unless a strong reversal breaks those resistance levels.

XRP Ichimoku Cloud.
XRP Ichimoku Cloud. Source: TradingView.

Additionally, the cloud ahead is red and spans horizontally with a downward slope, reinforcing the bearish outlook in the near term. The thickness of the cloud suggests moderate resistance if the price attempts to move upward.

However, some consolidation is evident in the recent candles, showing that sellers may be losing some control.

For any potential trend reversal, XRP would need to break above the Tenkan-sen and Kijun-sen, and eventually challenge the cloud itself — a move that would require a clear uptick in momentum.

XRP Could Rise After Testing An Important Support Yesterday

XRP’s EMA lines are clearly aligned in a bearish formation, with the short-term averages sitting well below the long-term ones and a noticeable gap between them—highlighting strong downward momentum.

Yesterday, XRP price tested the support level at $2.06 and rebounded, showing that buyers are still active at that zone. However, this support remains critical. If it is tested again and fails to hold, XRP could fall further. Its next major support sitting around $1.90.

XRP Price Analysis.
XRP Price Analysis. Source: TradingView.

If the trend begins to shift and XRP breaks above the short-term EMAs, the first key resistance to watch is at $2.22. A successful move above this level could trigger a stronger recovery, potentially pushing the price toward $2.47.

If bullish momentum continues, the next upside target would be $2.59. For now, though, the EMA structure still leans bearish. XRP would need sustained buying pressure to flip the trend and aim for those higher resistance levels.

Disclaimer

In line with the Trust Project guidelines, this price analysis article is for informational purposes only and should not be considered financial or investment advice. BeInCrypto is committed to accurate, unbiased reporting, but market conditions are subject to change without notice. Always conduct your own research and consult with a professional before making any financial decisions. Please note that our Terms and ConditionsPrivacy Policy, and Disclaimers have been updated.



Source link

Continue Reading

Market

Market Cap Now Approaching $300 Million

Published

on


SAFE has emerged as the best-performing altcoin of the day, with its price surging 5% in the last 24 hours and its market capitalization now close to $300 million. The coin is showing strong technical indicators despite some mixed signals from momentum oscillators that suggest consolidation may be on the horizon.

Technical analysis of the EMA lines remains bullish, with short-term averages positioned favorably above long-term ones, pointing to continued strength in the immediate term. However, recent RSI and BBTrend readings indicate a potential cooling-off period could be approaching as the asset digests its recent gains.

SAFE RSI Is Back To Neutral Levels After Reaching Overbought Levels

The SAFE RSI is currently at 54.71, maintaining a neutral position for the past three days after experiencing significant momentum earlier in the week.

This moderation in the indicator suggests that the previous buying pressure has subsided somewhat, allowing the asset to consolidate following recent price movements.

The current neutral reading indicates a balanced market where neither buyers nor sellers have a decisive advantage.

SAFE RSI.
SAFE RSI. Source: TradingView.

The Relative Strength Index (RSI) is a momentum oscillator that measures the speed and change of price movements on a scale from 0 to 100. Generally, an RSI reading above 70 is considered overbought, suggesting a potential reversal or pullback, while readings below 30 indicate oversold conditions that might precede a bounce.

With SAFE’s RSI recently peaking at 87 just four days ago, the asset was in strongly overbought territory, signaling excessive buying enthusiasm. The current value of 54.71 represents a significant cooling off from those extreme levels, suggesting that SAFE’s price could be entering a period of stabilization.

This moderation may provide a healthier foundation for sustainable price action moving forward, as the previous overbought conditions have been worked through without dropping into oversold territory. This potentially indicates underlying strength in the asset despite the retreat from recent highs.

SAFE BBTrend Is Still High, But Down From Yesterday

The SAFE BBTrend is currently at 13.6, maintaining a positive position for the last two days after reaching a peak of 19.39 yesterday.

This recent positive trend suggests that the price movement has been gaining momentum, though there appears to be some moderation from yesterday’s higher reading.

The continued positive BBTrend indicates that the asset is still showing strength, despite the slight pullback from yesterday’s peak value.

SAFE BBTrend.
SAFE BBTrend. Source: TradingView.

BBTrend (Bollinger Bands Trend) is a technical indicator that measures the strength and direction of a trend by analyzing the relationship between price and Bollinger Bands.

The indicator typically ranges from negative to positive values, with readings above 0 indicating a bullish trend and readings below 0 suggesting a bearish trend. With SAFE’s BBTrend at 13.6, this suggests a moderately strong bullish trend that could indicate potential for continued upward price movement in the near term for the altcoin.

However, the decrease from yesterday’s 19.39 peak might signal some slowing in momentum, potentially leading to consolidation before the next significant move higher.

Will SAFE Uptrend Revert Soon?

SAFE EMA lines are still bullish, with short-term lines positioned above long-term ones. This positive alignment of exponential moving averages indicates continued upward momentum in the price action.

If this uptrend momentum maintains its strength, SAFE could potentially climb to test the resistance level at $0.72.

Should this resistance be successfully broken, the next target would be $0.879. The altcoin could exceed $0.90 for the first time since January 19, sustaining its momentum as one of the most trending altcoins.

SAFE Price Analysis.
SAFE Price Analysis. Source: TradingView.

On the other hand, as indicated by the RSI and BBTrend indicators, the uptrend appears to be losing some momentum. This could signal a potential reversal in the near future.

If the trend does reverse, SAFE might test the nearby support level at $0.54, which sits precariously close to the current price.

Should this support level fail to hold, further downside could see SAFE decline to test subsequent support levels at $0.48 and $0.40. In a worst-case scenario, a drop all the way to $0.35 could potentially occur.

Disclaimer

In line with the Trust Project guidelines, this price analysis article is for informational purposes only and should not be considered financial or investment advice. BeInCrypto is committed to accurate, unbiased reporting, but market conditions are subject to change without notice. Always conduct your own research and consult with a professional before making any financial decisions. Please note that our Terms and ConditionsPrivacy Policy, and Disclaimers have been updated.



Source link

Continue Reading

Market

Trump Family Gets Most WLFI Revenue, Causing Corruption Fears

Published

on



A new report claims that President Trump and his immediate family receive most of WLFI’s revenues. The Trumps are entitled to 75% of token sale revenues, about $400 million, and 60% of other incomes.

If these numbers are even partially accurate, they raise significant concerns about potential conflicts of interest. They also raise questions about the broader implications for transparency and accountability regarding Trump’s crypto policies.

Does the Trump Family Receive WLFI Proceeds?

World Liberty Financial (WLFI), a project affiliated with President Trump, has made a lot of waves in the crypto space since the end of last year. After persistent rumors of a Binance partnership, WLFI officially launched a new stablecoin, USD1. There is no clear evidence of Binance’s involvement in this launch. However, a new report from Reuters has disclosed some disturbing details.

Essentially, it claims that it has found evidence of how much of WLFI’s revenues go directly to Trump’s family. Trump will get 75% of revenues from token sales and 60% from subsequent operations. WLFI completed its major token sale, which would, therefore, entitle the Trumps to about $400 million.

Reuters calculates that 5% of proceeds from this token sale would actually fund WLFI’s platform, with the rest going to other co-founders. Further, its buyers are not able to actually resell their tokens, and it’s unclear what governance actions they could influence. There’s not an apparent reason for the average retail trader to actually buy these assets.

If these numbers are true, they could represent a serious conflict of interest and a dire threat to the US economy. First, community leaders like Vitalik Buterin warned of corruption from political meme coins like TRUMP. If Trump gets a cut of WLFI’s token sales, that’s already a huge avenue for misuse.

Additionally, since Trump is making huge changes to US financial regulators, there may not be anyone to investigate WLFI corruption allegations. For example, TRON founder Justin Sun invested $30 million into WLFI, and the SEC settled a fraud case against him months later. The SEC has been settling all its crypto enforcement actions, but this investment still looks relevant.

“You’ve got the guy in charge who is responsible for his own regulation. WLFI tokens would be the perfect vehicle for governments or oligarchs overseas to funnel money to the president,” former regulator Ross Delston claimed.

The biggest danger might not even come from political corruption or fears of centralization in crypto. Trump recently outlined a plan to use stablecoins to promote dollar dominance, and WLFI now has its own stablecoin. It also has around $111 million in unrealized losses due to its crypto investments and claims it will use “other cash equivalents” in USD1’s reserves.

It’s hard to overstate the potential risks involved. Given Trump’s financial stake in WLFI, there’s a clear incentive to promote the firm’s stablecoin as part of his “dollar dominance” agenda. If this leads to widespread investment in USD1 and the peg doesn’t hold, the consequences could ripple across the entire crypto market.

Simply put, this sort of business arrangement is totally unprecedented for a sitting US President. A few Senators are already investigating Trump’s connections with WLFI. However, their lack of political power and defanged federal regulators may hamper their ability to change anything.

Disclaimer

In adherence to the Trust Project guidelines, BeInCrypto is committed to unbiased, transparent reporting. This news article aims to provide accurate, timely information. However, readers are advised to verify facts independently and consult with a professional before making any decisions based on this content. Please note that our Terms and ConditionsPrivacy Policy, and Disclaimers have been updated.



Source link

Continue Reading

Trending

Copyright © 2024 coin2049.io