Le département des services financiers de New York a constaté que les entreprises de cryptographie bloquaient les adresses cryptographiques des pirates Twitter dans les 40 minutes.

Le département des services financiers de New York, ou NYDFS, a publié un long rapport analysant l’impact du piratage Twitter très médiatisé de juillet , qui a entraîné le vol de plus de 118000 dollars de Bitcoin ( BTC )

Bien au-delà de l’impact matériel immédiat, le NYDFS déclare que l’incident a révélé de profondes faiblesses en matière de cybersécurité d’une société de médias sociaux cotée en bourse évaluée à 37 milliards de dollars et comptant plus de 330 millions d’utilisateurs mensuels actifs. La découverte a de graves conséquences à la lumière de l’influence toujours croissante de la plate-forme sur les marchés financiers et la sphère politique.

Deux sections clés du rapport NYFDS , publié le 14 octobre, traitent de l’impact du piratage de Twitter sur les titulaires de licences de crypto-monnaie du département et de la façon dont ces entreprises ont réagi pour protéger leurs clients contre la fraude. NYFDS a également étudié et compilé les recommandations des entreprises de cryptographie sur la manière d’empêcher une cyberattaque similaire de réussir à l’avenir.

L’agence note que dans la troisième phase du piratage, les attaquants ont pris pour cible les comptes Twitter de sociétés de cryptographie, qui comprenaient des entités réglementées par NYDFS. Ceux-ci «ont réagi rapidement pour bloquer les adresses impactées, démontrant la maturité du marché de la crypto-monnaie à New York et de ceux qui sont autorisés à s’y engager. Leurs actions montrent que New York continue de fixer un standard élevé et n’attire que les acteurs les plus responsables. »

Coinbase, Gemini et Square, qui fournissent tous des services de portefeuille et dont les comptes Twitter ont été piratés, ont rapidement bloqué les adresses Bitcoin publiées par les pirates sur Twitter. Selon l’enquête de NYFDS, chacune des entreprises a bloqué les adresses pertinentes dans les 40 minutes suivant le piratage de leurs comptes.

Quinze entreprises de cryptographie ont interrogé au total les transferts bloqués vers les adresses, tandis que sept ne l’ont pas fait

Le rapport note que certaines entreprises ont des modèles économiques différents et ne gèrent pas directement les services de garde et de transfert, ce qui explique leur inaction.

Parmi ceux qui le font, Coinbase a bloqué environ 5 670 transferts, évalués à environ 1 294 000 $; Square bloqué 358, d’une valeur d’environ 51 000 $; Gemini en a bloqué deux, d’une valeur d’environ 1 800 $; et Bitstamp en a bloqué un, d’une valeur de 250 $.

L’autre objectif de l’enquête et du rapport du NYFDS était d’analyser les mesures de sécurité prises par les entreprises de cryptographie pour protéger leurs comptes de médias sociaux après le piratage et de recueillir des recommandations clés pour renforcer la sécurité à l’avenir.

Celles-ci incluaient l’utilisation de mots de passe forts et uniques, la surveillance des comptes de médias sociaux pour les publications non autorisées, l’utilisation de l’authentification multifacteur mais évitant l’authentification multifacteur par SMS en raison de sa vulnérabilité aux piratages et la limitation de l’accès des employés aux comptes de médias sociaux.

Il Dipartimento dei servizi finanziari di New York ha scoperto che le società di crittografia hanno bloccato gli indirizzi crittografici degli hacker di Twitter entro 40 minuti.

Il Dipartimento dei servizi finanziari di New York, o NYDFS, ha pubblicato un lungo rapporto che analizza l’impatto dell’hacking di Twitter di alto profilo di luglio , che ha provocato il furto di oltre $ 118.000 di Bitcoin ( BTC )

Ben oltre l’impatto materiale immediato, il NYDFS afferma che l’incidente ha messo in luce le profonde debolezze della sicurezza informatica di un’azienda di social media quotata in borsa del valore di $ 37 miliardi e che conta oltre 330 milioni di utenti mensili attivi. La scoperta ha gravi conseguenze alla luce dell’influenza in continua espansione della piattaforma sia sui mercati finanziari che sulla sfera politica.

Due sezioni chiave del rapporto NYFDS , pubblicato il 14 ottobre, affrontano l’impatto dell’hacking di Bitcoin Evolution sui licenziatari di criptovaluta del dipartimento e come queste aziende hanno risposto per proteggere i propri clienti dalle frodi. Il NYFDS ha anche esaminato e compilato le raccomandazioni delle aziende di criptovaluta su come impedire che un simile attacco informatico abbia successo in futuro.

L’agenzia osserva che nella terza fase dell’hacking, gli aggressori hanno preso di mira gli account Twitter delle società crittografiche, che includevano entità regolamentate dal NYDFS. Questi „hanno risposto rapidamente per bloccare gli indirizzi interessati, dimostrando la maturità del mercato delle criptovalute di New York e quelli autorizzati a impegnarsi al suo interno. Le loro azioni dimostrano che New York continua a fissare standard elevati e ad attrarre solo gli attori più responsabili „.

Coinbase, Gemini e Square, che forniscono tutti servizi di portafoglio e i cui account Twitter sono stati violati, hanno rapidamente bloccato gli indirizzi Bitcoin pubblicati dagli hacker su Twitter.

Secondo il sondaggio del NYFDS, ciascuna delle società ha bloccato gli indirizzi pertinenti entro 40 minuti dalla violazione dei propri account

Quindici aziende di criptovaluta intervistate in totale hanno bloccato i trasferimenti agli indirizzi, mentre sette no. Il rapporto rileva che alcune società hanno modelli di business diversi e non gestiscono direttamente i servizi di custodia e trasferimento, il che spiega la loro inerzia.

Tra quelli che lo fanno, Coinbase ha bloccato circa 5.670 trasferimenti, per un valore di circa $ 1.294.000; Square ne ha bloccati 358, del valore di circa $ 51.000; Gemini ne ha bloccati due, del valore di circa $ 1,8000; e Bitstamp ne ha bloccato uno, del valore di $ 250.

L’altro obiettivo del sondaggio e del rapporto del NYFDS è stato quello di analizzare le misure di sicurezza adottate dalle società di criptovaluta per proteggere i propri account sui social media in seguito all’hacking e raccogliere raccomandazioni chiave per rafforzare la sicurezza in futuro.

Questi includevano l’utilizzo di password complesse e univoche, il monitoraggio degli account dei social media per i post non autorizzati, l’utilizzo dell’autenticazione a più fattori ma l’evitamento dell’MFA basato su SMS a causa della sua suscettibilità agli hack e la limitazione dell’accesso dei dipendenti agli account dei social media.

They even referred to cryptomeda as „an instrument of economic empowerment.

In a surprising move, Square announced the acquisition of 4,709 Bitcoin (BTC) worth about US$ 50 million at the time of this article. The company’s co-founder, Jack Dorsey, has long been an advocate of Bitcoin and cryptomeda, with the company’s CashApp allowing its users to invest in Bitcoin.

The news comes months after another publicly traded company, MicroStrategy, decided to convert a part of its fortune into Bitcoin System and currently, the company owns 38,250 BTC and its CEO Michael Saylor has become one of the most active Bitcoin advocates. Although MicroStrategy is a large company with a market capitalization of $1.5 billion, it pales in comparison to Square, which has a capitalization of $81 billion.

Square’s press release indicates that this change is a kind of ideology statement:

„Square believes that cryptomoeda is an instrument of economic empowerment and provides a way for the world to participate in a global monetary system that aligns with the company’s purpose.

On September 30, Dorsey criticized Coinbase CEO Brian Armstrong for his apolitical leadership:

#Bitcoin (also known as „crypto“) is a direct activism against an unverifiable and excluding financial system that negatively affects much of our society. It is important, *at least*, to recognize and connect with the related social problems your clients face daily. This leaves people behind: https://t.co/0LMlF1qcmG

The press release noted that the investment represents approximately 1% of Square’s „assets at the end of the second quarter of 2020“. On 30 June, company’s total assets amounted to US$ 7.8 billion, so the acquisition may represent more precisely 0.64% of company’s assets.

Bitcoins coming from BitMEX, international exchange of cryptomoeda, can be marked as „high risk“ in Brazil by other cryptoactive companies.

Thus, with this type of marking, deposits from Bitcoins held in custody at BitMEX can be „locked“ or „refused“ by national companies.

BitMEX brokerage company exchanges leaders after criminal charges

This may occur because Chainalysis, the blockchain research company, will initiate alert classification for its clients.

This Thursday (08) the company alerted all its clients that it will adopt the alert classification in the cryptoactives coming from BitMEX.
KYT

This way, all clients who use Chainalysis KYT’s „Know Your Transaction“ (KYT) solutions received the alert in the system.

The alert will not only work for transactions sent from BitMEX as of October 13th, but will also cover „past“ BitMEX transactions.

BitMEX actions can scare away big institutions, says former CBOE trader

In Brazil, companies such as Banco Topázio, used by Zro Bank, fintech de cryptomoedas, are among Chainalysis‘ clients.

„Any transfer after October 1st should be considered high risk. Compliance teams should also examine older transfers. However, this change will be implemented gradually, as it may trigger alerts about thousands of transfers made in the past,“ says Chainalysis.

BitMEX rejects the charges of CFTC and DoJ, while the crypto trade is to continue undisturbed.

In a blog entry on Thursday, the crypto trading platform BitMEX defends itself against the latest charges brought against the company and its operator by the US regulatory authority CFTC and the Department of Justice.

In its statement, BitMEX responds that it „already Bitcoin Circuit in its early days as a start-up, endeavoured to comply with applicable U.S. law as interpreted at the time and to act in accordance with the assistance available at the time“.

What is to be understood as „applicable American law“ will probably be a matter for negotiation in the lawsuit against BitMEX. The trading platform, which specialises in crypto derivatives, has repeatedly emphasised in the past that it is not accessible to American customers. However, this claim has already been critically questioned by other parties. The main allegation of the CFTC lawsuit is that BitMEX is alleged not to have properly registered with the authority as a trading platform for derivatives.

The US Department of Justice (DoJ) in turn accuses the crypto exchange of not having implemented sufficient measures to obtain customer information (KYC) and to combat money laundering (AML). Both government agencies point out that BitMEX was warned for years that its operation in this form was illegal.

In the blog entry, BitMEX stresses that trading on the platform continues unrestricted despite the lawsuit. This resembles a real declaration of war, as Samuel Reed, one of the co-founders of the crypto exchange, was arrested in the course of the day.