ChainCatcher reported that according to CoinDesk, WazirX and Liminal Custody blamed each other in yesterday's $230 million cryptocurrency attack, causing users to have doubts about the security of their funds. WazirX said that the attack involved a multi-signature wallet using Liminal's digital asset custody service. The attack was caused by the difference between the data displayed on the Liminal interface and the actual content of the transaction. Liminal said that its infrastructure was not damaged and all wallets (including WazirX's wallets) are safe. Liminal mentioned in the blog, "Unfortunately, three victim machines injected malicious code into the transaction, indicating that this was a complex and planned attack on a Gnosis smart contract multi-signature wallet."
WazirX today filed a police report and has engaged India’s Computer Emergency Response Team (CERT-In). The stolen funds represent more than 45% of its $500 million holdings, according to a transparency report in June. Crypto security firm Elliptic said North Korean hackers appear to be behind the attack.