🚨 Breaking: WazirX has reportedly withdrawn an additional ₹170 crore ($20 million) from user funds.
🔍
•$14 million has been earmarked for CoinSwitch amidst an ongoing legal case.
•$6 million remains unaccounted for, with no clarity on its intended use.
📜 Background:
WazirX, once India’s largest crypto exchange, has faced mounting regulatory scrutiny, including investigations into alleged money laundering and operational mismanagement.
Big question, @NischalShetty: Why are you using users' funds to pay @CoinSwitch?
Because @CoinSwitch is an institution with deep pockets to fight legal battles?
Why is there an unnecessary delay in returning the user's funds?
Hi @WazirXIndia, we want our crypto back 100% at the current market price.
Please refund, everyone is waiting.
We are missing this bull market
- Wazirx victims
Repost and ❤️ for better reach.
#WazirX
Went through recent Wazirx town hall - Key take away :
1) Wazirx continues act like a Victim & blame Binance & Liminal.
2) Wazirx moved distribution date to March-April 2025 because they were late with court filing by 2 weeks.
3) Once moratorium is approved - 100% remaining USD funds will be distributed but no comment on surplus or upside whether it will be distributed with it or not.
4) Crypto Withdrawals will require Higher Kyc (Which might take more time after distribution happens)
5) Wazirx claims POE token is owned by users (Question is how - When this token was never listed on wazirx)
6) All expenses to reopen exchange, launch dex, lawsuits, etc - will be taken out of user funds.
7) Dodged Question about Nischal and founders contribution for expenses.
🔁 Enough is Enough
WazirX hack has left countless customers in distress as withdrawals are stopped and funds remain stuck.
Users are not able to take advantage of this bull run
ENOUGH IS ENOUGH, @WazirXIndia!
I've met countless traders who have all their funds tied up on WazirX—so many user’s are holding 100% of their crypto assets on your platform.
I've seen the pain and frustration in their eyes, and it's heartbreaking. People are suffering, and it's clear that something needs to change.
For the love of God, do something.
Refund users' money and take immediate action.
🚨THOUGHT/OPINION
Bitcoin $BTC will soon cross $100k 🚀
I can only imagine how much FOMO & frustrated #WazirX users must be at the moment !
While everyone else is making $$ from the PUMP, 🇮🇳Indian users funds remain locked on @WazirXIndia
After waiting 3 years for this PUMP, their hard earned money is now stuck with the #WazirX team !
Nischal, WazirX, & Co-founders are getting quieter.
Binance quiet from Day 1.
Governments are quiet.
Liminal is getting quieter.
But the hearts of Wazirx hack victims are screaming.
Big corporations have big legal teams behind them, but imagine ordinary people's plight!
🚨Full Story of the #WazirX Hack: Uncovering the Events 1.5 Hours Before the Attack, Involving #WazirX’s 5 Key Signatories - Mr. Nischal (who held 2 signatures), Mr. Sumit Patel, Mr. Tushar Patel, and Mr. Rohit Patel - and At least 10 Critical Transactions Signed by #WazirX and @liminalcustody That Made the Hack Possible 🚨🔐
All of these events are verified facts, not mere rumors. This is the exact chain of events that unfolded 1.5 hours before the hack, showing precisely how it occurred. Serious questions need answers, and #WazirX, @liminalcustody and @binance are equally responsible for addressing them and pulling users out of this chaos. Why all three? Let’s break it down.
Critical questions remain: Who tipped off the hacker to only target GALA tokens? 🕵️♂️ Who leaked the internal architecture of the #WazirX cold wallet? Upgrading the cold wallet to a new contract seems nearly impossible without insider knowledge🤔 And why were 45% of users funds left in a single vulnerable spot, making them an easy target? 🎯
On July 11, the hacker created what appears to be a fake KYC account in West Bengal on #WazirX. The identity and address of the mule is irrelevant - Because when you see him it’s clear he was just a front and didn’t even have ₹50K. 💸 The hacker then deposited approximately ₹1 crore in crypto, traded on #WazirX, and bought GALA tokens with a clear intent to drain #WazirX’s Gala hot wallet. On July 18, they had begun withdrawing GALA tokens, effectively emptying the WazirX hot wallet. 🚨In response, #WazirX started to replenish it from their cold wallet - which dangerously held 45% of users funds - to process customer withdrawals. 🔄 For those unaware, if you deposit only crypto on #WazirX (and not INR), you can still withdraw crypto. The hacker exploited this loophole.
The hacker only needed 3 #WazirX signatures and 1 from @liminalcustody to execute the attack. 📝
On July 18, around 10 AM, after the hacker drained the GALA hot wallet, Mr. Sumit Patel attempted the first GALA transaction on Liminal website to replenish tokens from the cold wallet. It failed due to a malicious payload injected by hacker, despite selecting the correct destination address. 🚫
Mr. Sumit Patel informed Mr. Rohit Patel and Mr. Tushar Patel about the errors on Liminal website.
Mr. Rohit Patel then tried using his hardware wallet on Liminal’s website - it also failed. Liminal was alerted and began actively engaging in the conversation with #WazirX team. 🗣️
Later, Mr. Sumit Patel tried again and signed two transactions - one for USDT and one for GALA. This time it worked, as the hacker already had access to his signature from the previous attempt. ✅
Mr. Rohit Patel signed two more transactions, and they both went through again because the hacker had previously captured his signature too. 🖊️
Mr. Tushar Patel signed two transactions: one for USDT (which succeeded), and one for GALA (which failed). It’s unclear why one was successful and the other wasn’t. Did Mr. Tushar Patel also sign an earlier GALA transaction, resulting in his leaked signature? 🤔
Liminal’s version differs here a bit: they claim Mr. Tushar Patel signed a legitimate USDT transaction, completing the 3 necessary WazirX signatures. Liminal simply added their 4th signature, but it failed because Mr. Tushar Patel’s signature was invalid due to mismatch in transaction. This particular transaction exposed Mr. Tushar Patel signature to the hacker, completing the third signature exploit by hacker. 🕵️♂️
Armed with all 3 compromised #WazirX signatures, the hacker possibly used the WazirX team’s existing login session to initiate a final transaction on liminal website that upgraded the WazirX cold wallet contract. Once these 3 signatures were submitted to Liminal, they provided the final 4th signature, allowing the contract to be upgraded. Did Liminal really sign this, or was their laptop and signature also compromised same as WazirX devices? If their systems were hacked like they claim that #Wazirx all 3 laptops were compromised which injected the malicious payload, it’s a catastrophic failure. Or if they willingly signed the transaction a second time, it shows reckless negligence, especially when millions were on the line. 🚨💥
#WazirX engaged Google's @Mandiant , which reported that all 3 laptops of #WazirX team involved were uncompromised. Meanwhile, Liminal’s audit, managed by @GrantThornton, confirmed that both the Liminal front end and backend were secure. Assuming both reports are correct which found their respective systems intact, this in itself strongly suggests an insider job or it suggests that WazirX and Liminal may have paid bribes to get clean reports while both their systems were actually compromised by hacker 🕵️♂️
Now, who is accountable? 🕵️♀️
WazirX must answer why they allowed 45% of users funds to be concentrated in one location and why they kept signing at least 8 times in 1.5 hours before the actual hack, knowing the cold wallet was under threat. Have they conducted an internal investigation to determine whether any of their signatories acted suspiciously? Did WazirX even check for impulsive or irregular behavior among the signers? 🔍
Liminal also owes answers. They claim their system doesn’t allow contract upgrades - so how was WazirX’s cold wallet upgraded? Why did they allow malicious transactions when only whitelisted addresses were supposed to be used? They say the hacker manipulated transaction fields to bypass security checks. This suggests their security infrastructure is 3rd class and severely flawed. How can they claim to be world class security providers when they don’t even scrutinize the transactions they sign? They simply signed twice once all 3 signatures were received from #WazirX without thinking twice and this was when they were in active communication with #WazirX team. Was the insider from Liminal team, or is this just gross incompetence? 🤯
Finally, @binance - Courts have not exempted Binance from WazirX ownership, meaning they too bear responsibility. Until the ownership dispute is resolved, Binance remains accountable. They need to expose the full truth - confidentiality be damned. Millions of lives are at risk, and Binance cannot sit by in silence.💥
A CBI investigation is crucial to uncover the truth about the #WazirX hack. Discrepancies in WazirX's and Liminal response raises serious concerns it might not be a genuine hack. This hack comes at a time when WazirX's profits were drying up, its ongoing dispute with Binance, and trading volumes were falling. All #WazirX victims, please file an online criminal complaint (details in pinned msg) to urge authorities to take action.🚨🕵️♂️
@PMOIndia@FinMinIndia@INCIndia@narendramodi@RahulGandhi@AmitShah@DCP_IFSO@CBIHeadquarters@dir_ed@MLJ_GoI@cryptoady@simplykashif@pushpendrakum@reallive3tv@crypto@Cryptowithkhan@EverythingAjay@TheWeb3CA@cz_binance@_RichardTeng@mahingupta@ForbesCrypto@the_hindu@aajtak
#WazirX
If you are a User impacted by WazirX, please be active on Twitter & Telegram.
If you are not going to be together, then please be ready to accept 20-40% of funds only that too after 6-18 months.
If you want to take action, support us on the applications we will file. I will share updates soon. Some will be form based and some will be public.
I will fight for the community on the civil side.
If you want to take criminal action, you can support lawyers in @IndiasCrypto group, they are better suited for criminal actions against WazirX.
Do something! But please don’t do Nothing 🙏🏻
@NischalShetty So, now the losses will be socialised further to cover legal fees for court proceedings and crypto users will get atmost 10-20 percent of their holdings. WazirX has made it clear that no contributions are going to be made from business side.
@WazirXIndia Please tomorrow don't come up with another poll or feedback form or similar type of thing.
Tomorrow announce about INR & Crypto withdrawals with a timeline.
Impacted Users are going through a really tough time, have some empathy.
Binance VS Wazirx Exchange
Incident = Hack Attack
#Binance, Don't worry your Funds are Safu. We will recover it for you. This attack is on Us not on You.
#WazirX, Oh No, Your Funds are being stolen in attack. We are investigating the issue. Hopefully if problem solve then we will see, users will receive their funds or not 🤪
@_RichardTeng@binance@cryptoady@sikanderali_@BinancePk@WazirXIndia@NischalShetty
@WazirXIndia@NischalShetty Users understand that your conclusive findings will blame Liminal custody entirely as your execs have been doing the same throughout their tweets so far. The most abhorrent part however is the complete lack of accountability and lack of shame in keeping your customers in the dark
WazirX got hacked 26 days ago (almost 1 month), but so far no clear update about what is going to happen with users funds. No any update breakdown of hacked funds.
It’s really heart breaking 💔