Legacy Address Activity Sparks Exchange Transparency Report
Recent on-chain movements associated with a historical wallet address belonging to a cryptocurrency exchange prompted questions from the community. The platform has since provided a detailed clarification, revealing the incident was contained to a long-deprecated deposit address and did not compromise its active security infrastructure.
The Root Cause: A Compromised, Inactive Address
According to the official statement, the address in question was linked to a security incident several years ago, after which its private keys were considered compromised. The address was immediately decommissioned, and users were repeatedly warned not to deposit funds into it.
Despite these warnings, small amounts of assets occasionally still get sent to such legacy addresses. To manage this, the exchange implemented an automated consolidation process to periodically sweep these funds to secure wallets.
The Glitch and Response: Platform Absorbs Loss, Users Made Whole
The recent anomaly was caused by a temporary failure in this automated consolidation process. This resulted in a delay in sweeping funds from the old address, leading to an operational loss for the exchange itself.
The platform's response was clear and user-focused:
- The financial loss was entirely borne by the exchange and not passed on to users.
- All users who had mistakenly deposited to the old address have been fully reimbursed, ensuring no customer funds were lost.
Core Security Architecture Remains Uncompromised
The statement strongly emphasized that the core security framework protecting user assets was never at risk. The incident was isolated to a peripheral, inactive system component.
Segregation of User and Platform Funds
The exchange employs a standard cold and hot wallet structure:
- User deposits are sent directly to addresses managed by cold wallets, which are completely segregated from platform operational funds.
- The platform's current main addresses and all active user deposit addresses were entirely unaffected by this legacy address issue.
In essence, user funds are safeguarded by offline cold storage, whose security is based on physical private key custody, independent of temporary online system glitches.
Operations Normal, Official Channels Are Key
All exchange services, including deposits, withdrawals, and trading, continue to operate normally. The platform advises users to rely solely on information published through its official channels during such events, cautioning against unverified rumors.
This episode demonstrates a structured incident response: rapid identification, transparent communication, internalization of losses, prioritization of user reimbursement, and a reaffirmation of the robustness of its core custody design.