WazirX, a prominent Indian cryptocurrency exchange, has officially filed a First Information Report (FIR) with the Delhi Police following a major cyber attack on its systems. The incident, which compromised a multi-signature wallet, resulted in the loss of over $234 million.
Details of the Attack
The attack involved sophisticated methods that bypassed the platform's security measures. The wallet, managed using Liminal's digital asset custody infrastructure, required approvals from six signatories—five from WazirX and one from Liminal. Despite these safeguards, attackers exploited a discrepancy between the data displayed on Liminal's interface and the actual transaction contents, enabling unauthorized transfers.
Official Statement and Investigation
WazirX confirmed the incident in a statement on X (formerly Twitter), highlighting the filing of the FIR under the BNS & IT Act on August 5, 2024. The investigation is being handled by the Intelligence Fusion & Strategic Operations (IFSO) unit of the Delhi Police. The exchange expressed confidence in the authorities and pledged full cooperation in the recovery of the stolen assets.
Community Reaction and Next Steps
The reaction from the community has been mixed, with some users critical of the delay in filing the FIR. WazirX clarified that while an initial complaint was made immediately after the attack, procedural requirements delayed the formal FIR.
Future Actions and Reimbursement
Co-founder Nischal Shetty reassured users that the exchange is working diligently to recover the stolen funds. In addition to blocking some deposits linked to the theft, WazirX is collaborating with various cybersecurity experts to trace and reclaim the assets. Shetty also mentioned the possibility of launching a new project or initiative to airdrop tokens to affected customers as a form of compensation.