Iranian crypto exchange Bit24 disputes allegations of KYC data leak incident

Flow

Active Member
Crypto News Squad
Jul 10, 2023
214
93
27
Iranian crypto exchange Bit24 disputes allegations of KYC data leak incident


Iranian cryptocurrency exchange Bit24.cash has denied allegations that it exposed personal information of platform users due to a misconfigured storage system.

Allegation that KYC data was exposed


Earlier today, Cybernews researchers reported that a security flaw in the platform led to the unintended exposure of publicly accessible Know Your Customer (KYC) data, including users’ IDs, passports, and credit card information, due to misconfigured cloud storage containers.

Researchers warned that the leak exposed platform users to threats of identity theft, phishing attempts and fraudulent transactions.

Cybernews said that the vulnerability has been fixed, the storage is now secured and is inaccessible as of the date of publication.

Bit24 is one of Iran’s leading crypto trading platforms. The Asian nation is one of several countries that has adopted a pro-cryptocurrency stance as part of efforts to circumvent sanctions imposed on it by Western superpowers.

Bit24 counter claims


In an email response to Cybernews, Bit24 denied that the vulnerability was discovered following an internal investigation.

Hossein Amini, a security engineer at Bit24, claimed that the misconfiguration in question was incorrect and inconsistent with the platform’s system architecture and security protocols.

“The reference to a misconfigured MinIO instance granting access to S3 buckets containing KYC data is completely false and not compatible with our system architecture or security protocols. We can confirm that our MinIO installation and cloud storage containers remain secure and there is no unauthorized access to sensitive user data,” Amini said.
Bit24 has not responded yet CryptoSlate Request for additional comment as of press time.

Data breaches in crypto


Meanwhile, cases of data breaches are quite common in the crypto industry due to regulated platforms collecting personal data during registration. Although these Know Your Customer protocols aim to prevent illegal activities, secure storage remains a significant challenge.

Last year, CryptoSlate Several crypto organizations, including Bitcoin-based payment platform Strike and bankruptcy claims agent Kroll, have reportedly suffered breaches that exposed their users’ information.


”exchanges”

#Iranian #crypto #exchange #Bit24 #disputes #allegations #KYC #data #leak #incident