Coins.ph

On October 17, 2023, Coins.ph, a leading Philippine cryptocurrency exchange, was breached, losing 12.2 million XRP ($6 million) from its Bitgo hot wallets, as reported by BitPinas.

Detected within a 30-minute window at 06:00 UTC, former consultants Vladimir Evgenevich Avdeev and Sergey Yaschuck allegedly exploited retained system access to steal the funds, transferring them to exchanges like OKX, WhiteBIT, OrbitBridge, SimpleSwap, ChangeNOW, and FixedFloat, per XRP Scan (0x4a…).

WhiteBIT blocked 445,000 XRP after Coins.ph’s alert, and Chainalysis flagged the addresses, per the article. Coins.ph, with $2.5 million daily trading volume per CoinMarketCap, initiated “unexpected maintenance” from October 16-18, initially denying the hack despite media inquiries, only confirming it in July 2024 after the Philippine DOJ charged the suspects with cybercrime, per Inquirer.

The accused, who fled the country, face 23 and 3 counts respectively, with bail at ₱120,000 per count, per BitPinas.

No funds were recovered, and Coins.ph assured user assets were safe, resuming services, per Telegram (@coinsph). This insider-driven heist, alongside HTX’s $7.9 million hack, exposes the peril of lax access controls. Coins.ph’s delayed transparency turned trust into a casualty, but its legal pursuit signals a fight for justice in crypto’s murky waters, where insiders can be the deadliest sharks.