(WSJ) — One of the largest online bitcoin exchanges has temporarily suspended services after losing some 19,000 bitcoins ($5.1 million) in what the company said was a breach of its systems, reviving concerns about the security of the digital currency.
Slovenia-based Bitstamp, in a message on its site Tuesday, said some of its “operational wallets” were compromised on Jan. 4 and urged customers to no longer make deposits to previously issued bitcoin deposit addresses.
The alleged cyberattack comes less than a year after the collapse of Tokyo-based exchange Mt. Gox, which initially said hackers had stolen 800,000 bitcoins—200,000 of which were later recovered—worth almost $500 million at the time.
The alleged breach is stirring skeptics to argue that bitcoin remains too insecure for mainstream use. “There were lots of claims made last year and in 2013 that bitcoin was faster and safer and cheaper, but what we are learning increasingly is that maybe it isn’t safer,” said Mark T. Williams, a Boston University professor and frequent bitcoin critic who has testified before a congressional hearing about the digital currency.
Launched in 2009, bitcoin is an electronic currency created on computers and traded among people who store it in digital wallets. Despite volatility in the bitcoin price, which has fallen 75% from a peak around $1,150 in early December 2013 to about $283 in recent trading, mainstream adoption of bitcoin has continued. In 2014, various businesses, including Microsoft Corp. and Dell Inc., announced they would accept it in payment for certain goods and services, often hedging the risk of holding the digital currency by quickly converting it into dollars.
Bitstamp, which held a post-Mt. Gox audit last year aimed at proving its solvency, said in its statement that the attack affected only “a small fraction of Bitstamp’s total bitcoin reserves.” The rest of the reserves, which aren’t needed for trading operations, were managed according to the industry’s “cold storage” standard, meaning that passwords to unlock payments from a bitcoin address were kept offline, out of the reach of hackers.
After a sharp three-day decline in bitcoin’s price that some analysts connected to Bitstamp’s problems, the market stabilized Tuesday. Questions swirled among bitcoin users on Twitter and other public forums about the exchange. However, leading businessmen who back bitcoin ventures spoke out mostly in defense of the company’s management, while seeking to assure people that their own operations were secure.
Bitstamp is “a well-run company with deep-pocketed backers that plays a critical role in the bitcoin ecosystem,” said Barry Silbert, founder of the Bitcoin Investment Trust and a prominent investor in bitcoin startups via his newly formed Digital Currency Group. “I have no doubt they will emerge from this a stronger company.”
In late 2013, Bitstamp received an investment of around $10 million from Pantera Capital Management LP, a hedge fund that manages money for Fortress Investment Group LLC.
Executives from Bitstamp and Pantera were not immediately available to respond to questions. At his Twitter account, Bitstamp CEO Nejc Kodrič offered “sincerest apologies to those who are affected by our service being temporary suspended.”
BitPay, one of the biggest processors of bitcoin payments for merchants, published a blog post stating it had temporarily removed Bitstamp’s prices from its benchmark for setting exchange rates to assure that “customers continued to receive the most favorable price available globally.”
Will O’Brien, founder of BitGo, a company that aims to better protect online bitcoin wallets, said the Bitstamp development was a “wake-up call for everyone in the industry.”
Meanwhile, Jeremy Allaire, CEO of Circle Internet Financial, a provider of bitcoin deposit and wallet services for consumers, said “100% of our customer deposits are insured from theft.”
Mr. Allaire said “a continued focus on cyber and physical security and risk management controls and protocols is critical for the industry.” He added that “harsh cybercriminal attacks on financial institutions are not unique to the digital currency industry.”
There has been a surge of venture funding for bitcoin projects, spurred in part by innovations that use the digital currency’s core software for applications that aim to bypass middlemen in various commercial activities. According to news service Coindesk, new venture capital invested in bitcoin startups reached $315 million last year, more than tripling from $93 million in 2013.
But Jeffrey Robinson, whose recently published book “BitCon” harshly critiques the bitcoin movement, said Bitstamp’s emergence as Mt. Gox’s successor showed that bitcoin enthusiasts are “delusional.”
“What is the thinking behind a bunch of people who suddenly run to a Slovenian exchange that never publishes financial statements?” he said.
This article originally appeared in the WSJ and has been republished here for our readers. Log in below using your favorite social network and weigh in on the discussion.
