InvertopediaThe encyclopedia of how things fail

DMM Bitcoin

From Invertopedia, the encyclopedia of how things fail

Entry 123. An analysis built from the public record, not an insider account. Spot an error? Tell us.

DMM Bitcoin was a Japanese crypto exchange launched in January 2018[1]. On May 31, 2024, hackers took 4,502.9 bitcoin, worth $308 million then[1][2]. The exchange secured 55 billion yen in loans[1], but on November 29 it signed a deal to move all accounts and assets to SBI VC Trade and said it would close once the transfer was done[1][3].

This entry is a stub: the short version, sourced. Know more about DMM Bitcoin? Help expand it.
Contents
  1. 1What happened
  2. 2The kill shot
  3. 3The inversion
  4. 4References

What happened

Late Mar 2024A North Korean actor compromises a Japan-based wallet software firm and uses that access to pivot to DMM.[2]
May 31, 2024Hackers take 4,502.9 BTC.[1][2]
Sept 2024Serious problems are found in the company's system risk management.[1]
Nov 29, 2024DMM signs the transfer deal with SBI VC Trade.[1][3]
Dec 2024The stolen funds are traced to TraderTraitor-controlled wallets.[2]

The kill shot

The regulator said serious problems were found in DMM's system risk management and its response to the risk of crypto leaking out.

The company never appointed someone to run the risk management system[1].

The inversion

If one compromised vendor employee can move a transaction, you do not have a second check.

References

  1. ^ “Japanese crypto service shuts down after theft of bitcoin worth $308 million”. The Record, December 2, 2024. Launch, theft, loans, FSA findings, closure and SBI deal.
  2. ^ “FBI attributes largest crypto hack of 2024 to North Korea’s TraderTraitor”. The Record, December 25, 2024. FBI attribution and the attack path.
  3. ^ “Japanese Crypto Exchange to Shut Down After $300M Hack, Transfer Accounts to SBI”. Decrypt, December 2, 2024. Closure and transfer to SBI VC Trade.