-
Liminal
Custody
said
three
WazirX
wallets
were
breached
in
the
lead-up
to
the
$230
million
exploit. -
WazirX
said
that
a
discrepancy
on
Liminal’s
interface
triggered
the
loss.
If
filed
a
police
report
today. -
Security
firm
Elliptic
said
on
Thursday
that
North
Korean
hackers
appear
to
be
behind
the
hack.
WazirX
and
Liminal
Custody,
the
two
firms
at
the
center
of
yesterday’s
$230
million
exploit,
are
blaming
each
other
for
the
success
of
the
attack,
leaving
users
in
the
dark
over
the
security
of
their
funds.
In
a
post
on
X,
Indian
crypto
exchange
WazirX
said
the
exploit
was
related
to
a
multisig
wallet
using
Liminal’s
digital
asset
custody
service.
The
attack
stemmed
from
a
“discrepancy
between
the
data
displayed
on
Liminal’s
interface
and
the
transaction’s
actual
contents,”
it
said.
Liminal,
for
its
part,
said
its
infrastructure
had
not
been
breached
and
that
all
wallets
–
including
WazirX’s
–
remain
safe.
A
multisig
wallet
is
one
that
requires
several
people
to
sign
a
transaction
before
it
can
be
executed.
“There
is
no
breach
in
Liminal’s
infrastructure,
wallets
and
assets,”
Liminal
said
in
a
blog
post.
“Unfortunately
three
of
the
victims
machines
have
been
found
injecting
malicious
payloads
into
the
transaction
indicating
a
sophisticated,
well
planned
and
targeted
attack
on
one
specific
Gnosis
Smart
Contract
Multi-Sig
wallet.”
The
exchange
filed
a
police
report
and
engaged
with
the
Indian
Computer
Emergency
Response
Team
(CERT-In)
earlier
today.
The
stolen
funds
account
for
more
than
45%
of
its
$500
million
holdings,
according
to
a
transparency
report
from
June.
Crypto
security
firm
Elliptic
said
that
North
Korean
hackers
appear
to
be
behind
the
exploit.
Liminal
did
not
respond
to
a
request
for
comment.