Crypto.com reveals that an attack targeting 483 users resulted in the withdrawal of more than $31 million in cryptocurrency

<p>After teasing final figures throughout the week, Crypto.com has issued an official statement regarding the incident that resulted in the suspension of its users' ability to withdraw funds.</p> <p>"In the majority of cases, we were able to prevent the unlawful withdrawal, and in all other instances, consumers received a full refund," the business stated.</p> <p>On Monday, the business reported that 483 individuals had their accounts compromised due to illicit cryptocurrency withdrawals.</p> <p>"Unauthorised withdrawals totalled 4,836.26 Ethereum, 443.93 Bitcoin, and almost US$66,200 in other cryptocurrencies."</p> <p>At the time of press, ether's market capitalisation was just shy of $14 million, while bitcoin's fiat value was slightly more than $17 million. In total, this brings the amount to about $31 million, depending on the day's unpredictable cryptocurrency prices.</p> <p>Crypto.com stated that it observed transactions in the early hours of Monday morning UTC that did not require users' two-factor authentication.</p> <p>"Crypto.com revoked all customer two-factor authentication tokens and enhanced security hardening measures, requiring all customers to re-login and configure their two-factor authentication token to ensure only permitted activity occurred. "Approximately 14 hours of downtime occurred for the withdrawal infrastructure," it stated.</p> <p>Additionally, the business announced a new policy requiring customers to wait 24 hours before making their first withdrawal to a whitelisted address, as well as a scheme that will refund consumers up to $250,000 if they make illegal withdrawals provided certain conditions are met.</p> <p>"As a precaution, we redesigned and transitioned to a whole new two-factor authentication system."</p> <p>These rules require customers to employ multi-factor authentication on all transactions when practicable, create an anti-phishing code at least 21 days before to the unauthorised withdrawal, submit a police report and send a copy to the corporation, and complet