Korea’s cryptocurrency exchange incident analysis from a technical point of view

Alex Park
Hexlant
Published in
4 min readJun 11, 2018

Through cryptocurrency exchange hacking incident,
We analyzed each token team’s contract codes and the possibility of compensation in case exchange was hacked.

The opinion of the token team’s compensable statue is an opinion of Hexlant.
* Please note that the above comments do not have any compensation coercion for the token team.

Finally, To prepare for exchange hacking, the token team may consider the Lock and UnLock functions for specific addresses when issuing tokens.

To investors, the lock function can be secure from hacking but this function may have a centralized personality that is slightly different from the block chain concept. So please note that it is not always a good token with Lock function.

1. Pundi X Token (NPXS)
Contract Address : https://etherscan.io/address/0xa15c7ebe1f07caf6bff097d8a589fb8ac49ae5b3#code

Function of token
- Stop trading of all tokens (O)
- Issue function for token addition (O)
- Lock, Unlock function for specific address (X)
- Burn function for specific address (X)

The possibility of compensation: It can’t lock for a specific address so that it would need another way to reward it.
If the token outflow is large, there is a way to stop the transaction for the whole token and to reissue it.

2. NPER (NPER)
Contract Address : https://etherscan.io/address/0x4ce6b362bc77a24966dda9078f9cef81b3b886a7#code

Function of token
- Stop trading of all tokens (O)
- Issue function for token addition (X)
- Lock, Unlock function for specific address (O)
- Burn function for specific address (X)

The possibility of compensation: It has a lock function for specific addresses.
It has already made locks, and developers who made NPER are seeking compensation ways through incineration of the payment of company holdings and outflow.

3. DENT (DENT)
Contract Address : https://etherscan.io/address/0x3597bfd533a99c9aa083587b074434e61eb0a258#code

Function of token
- Stop trading of all tokens (X)
- Issue function for token addition (X)
- Lock, Unlock function for specific address (X)
- Burn function for specific address (X)

The possibility of compensation: it can’t lock for a specific address so that it would need another way to reward it.

4. KyberNetwork (KNC)
Contract Address : https://etherscan.io/address/0xdd974d5c2e2928dea5f71b9825b8b646686bd200#code

Function of token
- Stop trading of all tokens (X)
- Issue function for token addition (X)
- Lock, Unlock function for specific address (X)
- Burn function for specific address (X)

The possibility of compensation: it can’t lock for a specific address so that it would need another way to reward it.

5. Aston X (ATX)
Contract Address : https://etherscan.io/address/0x1a0f2ab46ec630f9fd638029027b552afa64b94c#code

Function of token
- Stop trading of all tokens (O)
- Issue function for token addition (O)
- Lock, unlock function for specific address (O)
- Burn function for specific address (O)

The possibility of compensation: It has a lock function for specific addresses, so If you lock quickly, you can find a reward through the Burn or reissue function.

6. Tronix (TRX)
Contract Address : https://etherscan.io/address/0xf230b790e05390fc8295f4d3f60332c93bed42e2#code

Function of token
- Stop trading of all tokens (O)
- Issue function for token addition (X)
- Lock, Unlock function for specific address (X)
- Burn function for specific address (X)

The possibility of compensation: it can’t lock for a specific address so that it would need another way to reward it.
If the token outflow is large, there is a way to stop the transaction for the whole token and to reissue it.

7. Jibrel Network Token (JNT)
Contract Address : https://etherscan.io/address/0xa5fd1a791c4dfcaacc963d4f73c6ae5824149ea7#code

Function of token
- Stop trading of all tokens (O)
- Issue function for token addition (O)
- Lock, Unlock function for specific address (O)
- Burn function for specific address (O)

The possibility of compensation: it can lock for a specific address. Hacker moved the JNT tokens to EtherDelta address, so JNT have locked Ether Delta address for blocking transaction. Fortunately, most of the amount that the EtherDelta has is the amount of hackers, and some of the victims tied to the Ether Delta will be possible to compensate by issuing additional tokens from the JNT foundation.

<Transaction information transferred from hacker’s address to Ether Delta>
<Ether Delta address in lockup state>

8. B2BCoin (BBC)
Contract Address : https://etherscan.io/address/0xe7d3e4413e29ae35b0893140f4500965c74365e5#code

Function of token
- Stop trading of all tokens (O)
- Issue function for token addition (O)
- Lock, Unlock function for specific address (X)
- Burn function for specific address (X)

The possibility of compensation: it can’t lock for a specific address so that it would need another way to reward it.
If the token outflow is large, there is a way to stop the transaction for the whole token and to reissue it.

9. Storm
Contract Address : https://etherscan.io/address/0xd0a4b8946cb52f0661273bfbc6fd0e0c75fc6433#code

The contract code was not disclosed, so I couldn’t check.

Above all, I think the best way to resolve this accident is the stability of the holders and the block-chain market by resolving the situation.
I really hope this accident is resolved as soon as possible.

--

--