Komid Crypto Exchange Managers Sent to Prison for Generating Fake Volumes

Two executives from South Korea-based digital currency exchange Komid have reportedly been sentenced to serve time in jail as they have been charged with “fraud, embezzlement, and misconduct”, according to local news outlets.

Found Guilty Of Manipulating Trading Volumes For Personal Gains

Choi, who is the CEO of Komid, was sentenced to 3 years in prison on January 17th. Meanwhile, the other executive, Park has been given a 2 year prison sentence after both men were found guilty of “orchestrating fraudulent trading volume reports on their platform.” Prosecutors claim that both Choi and Park were involved in a scheme in which they “fabricated” 5 million transactions on Komid, a crypto trading platform that both the executives manage.

The prosecutors alleged that the fake volumes were used to deceive traders into thinking the exchange was handling a large number of orders. As mentioned in court documents, the two executives earned around $45 million, mainly from exaggerating trading volumes on their digital currency exchange.

Committing Fraud Against "Countless Number Of Victims"

Commenting on the exploitative activities, the presiding Judge stated:

Choi has committed fraud for a countless number of victims for a long period of time…. Furthermore, he holds the financial authorities responsible for failing to keep track of the industry better.

Admitting to have engaged in fraudulent activities, Park revealed during the court hearing:

Choi entered false orders, then we repeated the process and fooled investors into thinking the transactions were authentic, organic trades.

Notably, an executive from another major Korean crypto exchange, UpBit was also indicted last month for entering false orders in order to artificially inflate trading volumes. Other staff members from UpBit were charged with allegedly creating fake membership accounts and then making deposits, in an attempt to deceive users.

Exploitative Bithumb Trader Generated $250 Million In Fake Volume

As CryptoGlobe reported in September 2018, Bithumb, one of South Korea’s largest crypto exchanges (in terms of trading volume), was being exploited by a user as they had regularly been generating $250 million in “fake volume” on the platform. Alex Krüger, an economist and market analyst, had pointed out that the millions in fake volume were being traded at Bithumb “every day at 11 AM Korean Time since August 25th” 2018.

The Argentinian digital currency trader explained that one particular user had been taking advantage of Bithumb’s promotional offer. The Korean exchange had been giving users up to 120% payback on all trading fees paid by users through airdrops on a “first come first served basis.”

The exploitative user had reportedly been trading with himself, in order to receive much larger paybacks. This process was described as being similar to “wash trading” as the user had continuously entered “two opposite limit orders.” The abusive activity reportedly allowed the trader to earn $150,000 per day, according to Krüger’s calculations.

Liquidators Take Charge of Cryptopia: Here Are Cryptopia’s Big Mistakes

Phil Carroll is a Blockchain researcher and enthusiast who has been following the market for over 5 years now. He has been working as a freelance chain analyzer and as a technological content writer for whitepapers etc. In his spare time, he likes to write about topics that involve Bitcoin, Blockchain and cryptocurrencies.

Although cryptocurrencies themselves are incredibly secure, the exchanges that facilitate their movement have been far more problematic.

2018 set a record for the most crypto exchange hacks in history, and the efforts of bad actors are becoming more expansive and more expensive with time. Now, another crypto exchange has been brought down by a hack.

The Slow Descent of Cryptopia

The New Zealand-based Cryptopia endured a hack on January 14 that cost the company $16 million worth of digital assets including Ether and ERC-20 tokens. In the immediate aftermath of the breach, Cryptopia took its site offline posting a message indicating that the website was under maintenance.

At the same time, Cryptopia contacted police authorities who worked to identify the perpetrators and to attempt recovery of the stolen assets. A few days later, the company acknowledged the data breach and admitted that they incurred “significant losses.”

Eventually, Cryptopia came back online, providing trading limited trading opportunities while continuing to experience banking issues. This reduced functionality prevented many users from cashing out their tokens.

For a while it seemed as if it is going to recover from the hack. However, after making efforts to reduce costs and develop a profitable business model, Cryptopia decided that it was in the best interest of all stakeholders to liquidate the exchange. In a statement, Grant Thornton, Cryptopia’s assigned liquidator, conveyed their intention “to find the solution that is in the best interests of customers and stakeholders.”

Take Note of the Mistakes

In some ways, Cryptopia made many correct moves in attempting to repair their exchange after such a significant breach. However, the mistakes made prior to it were ones that can’t be overlooked.

Mistake #1 – Exchange Security

Obviously, whenever a crypto exchange is hacked, there is well-deserved scrutiny of its cybersecurity practices.

In this case, it’s speculated that the exchange stored users’ private keys, the most prominent line of defense again an intrusion, on a single server that was vulnerable to a hack. In this scenario, hackers could easily access and record users’ private keys and then delete the information, making it inaccessible to users and to the exchange.

It’s estimated that hackers gained access to 76,000 different wallets, and, according to analysis, “none of which were smart contracts“. Without access to their accounts, Cryptopia was powerless to stop hackers from draining funds from the exchange.

“What surprises me the most is the negligence in relation to the security of the entire chain of work with the exchange's wallets.” noted Serge Vasylchuk, CEO of CODEX Exchange. “It was possible to prevent a hack for Cryptopia if they would take three must-have measures seriously. First, to ensure maximum isolation from external influences and from accidental internal interference. Second, to backup private keys on a regular basis, on a well-protected physical copy”.

CODEX has been effusive in their security efforts. After deploying multi-stage security audit to ensure the integrity of their users’ accounts and funds, it received a 10/10 security rating from Hacken security team, CoinMarketCap's data accountability and transparency partner. It may be expensive, but it’s necessary for protecting digital assets, something that is critical in crypto markets.

To put it simply, the Cryptopia hack was predicated on lax security standards, and it could have been avoided or greatly diminished if the company embraced industry best practices for guarding user and company accounts.

Mistake #2 – Poor Community Transparency

Of course, technological oversights, while frustrating, are bound to happen from time to time. However, crypto exchanges have full control over their response. They decide their level of transparency and community investment, and their decisions in this regard can have cascading consequences.

Most notably, the company began by issuing a false statement to users. The website was not undergoing “unscheduled maintenance,” a misleading statement that is becoming a code for more problematic events.

While Cryptopia rightly contacted authorities to report criminal activity, the company’s updates were few and far between, leaving their users and the greater internet to speculate about the event and the state of their holdings.

Finally, when the exchange eventually relaunched, it was mostly unusable, appearing in a “read-only” format that prevented users from actually accessing the platform’s functionality.

Communication is always a choice, and exchanges that choose not to fully inform their userbase are doing them and the greater crypto community a disservice. “Of course, after such negligence it is difficult to tell users about the funds lost,” added Vasylchuk. “but the lack of timely communication only worsens the situation when there are people waiting for explanation.” 

Conclusion

Crypto exchanges are a crucial part of the digital currency ecosystem. Investors and traders need to be able to trust them and their ability to protect digital assets.

Cryptopia’s liquidation adds it to the list of exchanges that have misbehaved and have been punished for their actions.

Of course, it doesn’t have to be this way. Exchanges can learn from these mistakes. They can prioritize and enforce robust security standards while emphasizing transparency and communication throughout the process.

It’s the only way forward, and it’s one that exchanges need to learn now before they are the next ones making the news.