Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
On September 13th, the Hong Kong Securities and Futures Commission issued a statement titled "Regarding Unregulated Virtual Asset Trading Platforms," stating that the virtual asset trading platform JPEX did not have a license from the Commission and had not applied for one. On September 14th, the JPEX community discovered that the withdrawal limit on the JPEX platform was only 1000 USDT, while the withdrawal fee was as high as 999 USDT, effectively preventing users from withdrawing their funds. As of October 3rd, the police have received reports from 2,467 victims, involving approximately HKD 1.522 billion in total. Attack method (per SlowMist): Scam. Reported loss: $ 194,337,178.
- chain
- —
- protocol
- JPEX
- bug_class
- rug
- date_occurred
- 2023-09-13
- loss_usd
- $194,337,178
- source_id
- sm:jpex::2023-09-13