bilaxy hack initial (#216)

content/attacks/posts/2021-08-28-Bilaxy.md

@@ -0,0 +1,36 @@
+---
+date: 2021-08-28
+target-entities: Bilaxy
+entity-types:
+  - Exchange
+  - Custodian
+attack-types: Wallet Hack
+title: "Bilaxy Exchange Suffers Security Breach with a Loss of $21 Million"
+---
+
+## Summary
+
+On August 28, 2021, Bilaxy, a Seychelles-based centralized exchange, experienced a security breach, resulting in a loss of approximately $21 million. The attacker compromised Bilaxy's hot wallet and transferred roughly 300 tokens, including notable cryptocurrencies such as USDT, USDC, UNI, and Bilaxy Token(BIA), among others. As of August 16, 2023, the attacker still controls various tokens worth roughly $3,628,005.
+
+## Attackers
+
+The identity of the attackers remains unknown. The funds were transferred to the following address:
+- [0xa14d5da3c6bf2d9304fe6d4bc6942395b4de048b](https://etherscan.io/address/0xa14d5da3c6bf2d9304fe6d4bc6942395b4de048b)
+
+## Losses
+
+The total loss from this security breach amounts to approximately $21 million.
+
+## Timeline
+
+- **August 28, 2021, 06:19 PM UTC:** The [first malicious transaction took place](https://etherscan.io/tx/0x1c46175d138eb5be91c4c2e67e4a190058eba8298792e42b71674cf710d6a95e) with a transfer of 58 ETH.
+- **August 28, 2021, 07:00 PM UTC:** The Bilaxy website was suspended for emergency maintenance.
+- **August 29, 2021, 01:41 AM:** Bilaxy [announced the hack on their Twitter](https://twitter.com/Bilaxy_exchange/status/1431794222198181892) and advised against deposits.
+- **August 30, 2021, 03:00 PM UTC:** Bilaxy provided a [detailed update on its Telegram channel](https://t.me/s/bilaxy_announcements?q=Updates+for+Bilaxy+ERC20+hot+wallet+hacked+incident), disclosing the timeline of the incident. 
+- **August 30, 2021, 03:08 PM UTC:** Bilaxy [released a statement on Twitter](https://twitter.com/Bilaxy_exchange/status/1432359586074226690) saying that only some tokens were affected and other native assets such as BTC or ETH were safe.
+- **August 30, 2021, 03:26 PM UTC:** 200 ETH were laundered via Tornado Cash mixer in two transactions: [one](https://etherscan.io/tx/0x98efcfa24ab0c37a490e02d43d4b22d45565ef9b91fa40214de53407e21f739b), [two](https://etherscan.io/tx/0x194c25c2eedd006a8babc7a976b499e3d96ad3b9822b4691429a09a75d68735b)
+
+## Security Failure Causes
+
+- **Private Key Compromise:** The attack was facilitated through a compromise of Bilaxy's hot wallet, allowing the attacker to gain control over various assets.
+- **Insufficient Security Measures:** Bilaxy's lack of focus on security, insufficient blockchain monitoring, absence of two-factor authentication (2FA) in some layers of the protocol, and overall lack of transparency.