• Uniswap has become a popular place for laundering stolen coins.
  • Several projects appear to be less decentralized than expected.

KuCoin hack teaches us a couple of costly lessons about the decentralized finance (DeFi) industry. Some of them may become a revelation for investors.

KuCoin's story: the summary

On 25 September, an unknown hacker exploited the vulnerability of the Asia-based cryptocurrency exchange KuCoin and drained its hot wallets of $281 million in cryptocurrency assets. The episode has become the third-largest theft in the history of cryptocurrency trading platforms. 

The bad guys got away with a variety of assets, including Bitcoins, Litecoin and XRP. However, ERC-20 tokens accounted for over half of the loot. 

The composition of the assets stolen from KuCoin

Source: www.elliptic.co

Lesson 1: Centralized exchanges turned into a dead end

According to the data provided by Elliptic's research, the service that enables detecting and investigating risky crypto transactions, hackers attempted to sell the stolen assets on the regular exchanges. However, this route was blocked within minutes after the hack. All major trading platforms are equipped with the tools to identify where the assets originated from and freeze any accounts receiving such funds. 

Centralized cryptocurrency exchanges are very cooperative and tend to prevent the money laundering through their accounts. Moreover, some of the largest trading platforms cooperate with the authorities, providing them with tools to analyze blockchains and monitor suspicious activity.  

Thus Coinbase reportedly has dealt with various US authorities, including the Drug Enforcement Administration (DEA) and the Internal Revenue Service (IRS). The cryptocurrency exchange provides a cryptocurrency investigation tool called "Coinbase Analytics."

Lesson 2: DEXs turned into crypto laundromats 

Meanwhile, decentralized exchanges (DEXs) provided hackers with another option to bypass the anti-money laundering procedures and cash out the stolen assets. 

Unlike the centralized counterparts, DEXs are governed by smart contracts, meaning that there is no intermediary or centralized authority between the participants of the trade. 

This circumstance has a couple of consequences. First, the participants stay anonymous as they do not have to disclose their identities and go through know-your-customer (KYC) processes. Second, there is no one to freeze the account to seize the funds as everything is processed automatically, based on the rules of the smart contract. 

 KuCoin thief benefitted from the explosive growth of decentralized exchange activity on Ethereum and began selling the stolen ERC-20 tokens on these platforms without risk of being frozen.

DEXs involved in laundering funds stole from KuCoin

Source: www.elliptic.co

As the chart above shows, the hacker focused on four DEXs, Uniswap, Kyber Network, DEX.AG and Tokenlon, and laundered about $13.3 million in coins by the time of writing. Uniswap accounts for the lion's share of this activity. 

While Elliptic claims that its blockchain monitoring solutions can trace the funds on DEXs, there is still no way to block the transactions that involve the funds originated from the hack.  

Lesson 3: Decentralization can be falsified

Several projects introduced the measure to lock the funds stolen by the hacker. That's what Tether did, which is hardly surprising for the community. However, several projects that deemed to be decentralized pursued a similar strategy,

For example, Ampleforth (AMPL) and Ocean Protocol (OCEAN) also took decisive action against KuCoin's bad guy. 

Ocean Protocol team performed a hard fork from a few blocks before the hack to roll back the transactions. A new chain will become the main for the protocol. Basically, Ocean Protocol opted for the Ethereum's approach to the DAO hack. Read our in-depth story of what happened next.

Ampleforth team tweaked their smart contract to block the hacker's address from moving their AMPL. While this solution may look less drastic, it reveals the lack of decentralization and opens up the way to censorship. Unlike the Ocean, where users can opt for the old chain and follow the suit of Etthereum Classic, Ampleforth changed the contract unilaterally and gave the community no choice. 

Kardiachain, Orion Protocol, and Aleph all have taken similar steps showing their real centralized face.


Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers.

Cryptos feed

Latest Crypto News

Latest Crypto News & Analysis

Editors’ Picks

Biden's win of the US presidential election could have different effects on Bitcoin and DeFi

The presidential elections in the United States are just around the corner. While it is still hard to tell for sure who will secure the place in an Oval Cabinet, the most recent poll results show that Joe Biden, the Democratic presidential nominee, is leading the race. 

More Cryptocurrencies News

XTZ aiming for a 10% price jump if key support is defended

The past week for Tezos hasn’t been great, the digital asset lost around $300 million in market capitalization as Bitcoin continues gaining dominance over the market.

More Tezos News

TRX ready for a major price explosion according to indicators

Tron has been trading inside a tight range from $0.028 to $0.0239 for the past three weeks without a clear direction. Several indicators show that TRX is on the verge of a massive breakout, but in which direction?

More Tron News

Bitcoin leads the pack aiming for new yearly highs

The cryptocurrency market is slugging in recovery, accept for Bitcoin. Intense pressure continues to build on critical levels for major cryptocurrencies. 

More Bitcoin News


Bitcoin: BTC ready to escape from the range; bulls have $12,000 in mind

Bitcoin has been gaining ground amid positive fundamental developments. The flagship cryptocurrency is ready to break free from its current range and proceed with the recovery towards $12,000. 

Read the weekly forecast