Guy Turner

Regarding this security incident, there are many questions about the technical details. Based on the information currently available, we will clarify a few points: 1️⃣ This is not a case of hacking into one computer and transferring money This is not an incident that could be carried out through a single device. The hacking of an employee's computer was the starting point of this attack. Attacks targeting cryptocurrency institutions are usually highly targeted, and attackers often try to use complex methods to infiltrate systems. We have already discovered important clues related to the incident and have taken immediate measures to control the risk. The related investigation and tracing efforts are still ongoing. At this stage, the platform's core risk control and emergency mechanisms have been activated, and the security of user assets is our top priority. 2️⃣ Regarding "whether engineers have excessive permissions" This is not an incident where the attacker directly used the permissions of a certain engineer to complete the fund transfer, nor was it caused by a single person performing a "one-click operation." The related anomalies involve a more complex attack process. It should be emphasized that the current investigation has not attributed responsibility to any individual. The company will bear the corresponding responsibility and continue to carry out subsequent handling and security upgrades. 3️⃣ Facts that can be confirmed at present No evidence of wallet private key leakage has been found. Regarding user fund security, all losses caused by this incident will be fully covered by the SAFU fund and company funds, and users will not bear any losses. About US$3 billion in affected assets have been frozen on-chain. We are cooperating with law enforcement agencies and blockchain intelligence organizations to investigate, and the flow of funds on-chain is publicly traceable. 4️⃣ Deposit and withdrawal status Deposits are fully open and unaffected. Withdrawals have been suspended as a precautionary measure and are expected to reopen within 48 hours. The specific time will be subject to the official announcement. We understand this causes inconvenience to everyone and will provide updates on progress as soon as possible. 5️⃣ Follow-up We will continue to provide updates on progress while ensuring the accuracy of the investigation, and after the incident handling and review are completed, we will announce detailed information and further security reinforcement measures. We will face the exposed issues squarely and will be transparent in addressing them. Thank you all for your patience and oversight. 💛