Livecoin slams its doors shut after failing to recover from hack, financial loss | ZDNet

Livecoin has announced its closure following a cyberattack that allegedly compromised the firm's infrastructure and exchange rate setup.

SECURITY
Trump decrees American cloud providers need to maintain records on foreign clients
Cyber security 101: Protect your privacy from hackers, spies, and the government
Best antivirus software and apps in 2021: Keep your PC, smartphone, and tablet safe
The best VPNs for business and home use
The best security keys for two-factor authentication
How ransomware could get even more disruptive in 2021 (ZDNet YouTube)
How to improve the security of your public cloud (TechRepublic)
As previously reported by ZDNet, the Russian cryptocurrency exchange claimed it had been hacked roughly around Christmas, with the alleged cyberattackers seizing control of Livecoin systems in order to tamper with exchange rate values.

Bitcoin (BTC) exchange rates were changed from $23,000 at the time to over $450,000, and Ethereum grew from $600 to $15,000. Smaller cryptocurrency rates were also impacted.

As Livecoin asked users to stop all activity, the threat actors began cashing out, reaping profit in the process.

Livecoin claimed to have lost control of its "servers, backend, and nodes," and was unable to stop the attack from occurring. The cryptocurrency exchange said law enforcement had been notified of the security incident.

It has not yet been a full month since the alleged cyberattack and Livecoin is closing its doors permanently, citing damage in "technical and financial way[s]" for the decision.

In an announcement posted to livecoin.news, the organization said there is "no way" to continue operations and any "remaining funds" will be paid to customers.

Fund recovery plans or amounts are not yet public, beyond claimants being required to email the cryptocurrency exchange directly with their usernames and registration dates. Livecoin says that claims can be filed until March 17, 2021.

As noted by Coin Telegraph, one apparent user of the service has posted what is claimed to be an extensive list of documentation and personal information to verify claimant identities, including passport/ID scans, selfies, places of residence, primary device data for logging in to Livecoin, and video footage. On Twitter, the request for this vast array of personal data has prompted speculation around its legitimacy.

"We apologize for an existing situation and ask you to keep calm, including your conversation with support officers," Livecoin added. "Our service and team bear hard losses as well as our clients. In case of abuse and threats in conversation, the claim can be declined."

Livecoin's old website domain displays the message below, but no comment has been made concerning any potential ransomware attack.

screenshot-2021-01-19-at-12-30-06.png
Livecoin's Telegram chat is currently alight with speculation. Some have suggested that an exit scam is in play, which is a popular method for cryptocurrency exchange operators to vanish with user funds while claiming external cyberattackers have stolen cryptocurrencies held by a victim organization.