Global crypto exchange CoinEx, recently hit by a data breach, appealed to the hackers, identified as the North Korean-linked Lazarus Group, to negotiate and return the stolen funds. CoinEx offered a “generous bug bounty” in exchange and invited the hackers to collaborate on improving its security systems.
In a public letter posted on X (formerly Twitter) on September 15, CoinEx acknowledged the incident as a critical lesson, pledging to bolster asset protection. The attack, which occurred on September 12, drained an estimated $70 million from the platform’s hot wallets—surpassing initial reports of $53 million.
The breach forced CoinEx to halt deposits and withdrawals pending investigations. While service restoration timelines remain uncertain, the company assured phased withdrawal resumptions after enhanced security checks. CoinEx emphasized the stolen funds represent a small portion of its overall assets.