Investigation Reveals Iranian Cryptocurrency Exchange Exposed KYC Data of 230,000 Users
[ad_1]
According to recent research, Iranian cryptocurrency trading platform Bit24.cash apparently inadvertently leaked sensitive data of nearly 230,000 users.
according to a investigation An investigation conducted by Cybernews revealed that Iranian cryptocurrency exchange Bit24.cash misconfigured an instance of its high-performance object storage system, inadvertently granting access to the cloud containing the platform’s Know Your Customer (KYC) data. Access permissions for storage containers.
Researchers learned that approximately 230,000 Iranian citizens fell victim to misconfiguration, resulting in the exposure of their written consent to regulations and sensitive details such as passports, ID cards, and credit cards. Speaking to Cybernews, a spokesperson for Bit24.cash called the claims “inaccurate and misleading,” stressing that there was no evidence of a data breach or unauthorized access to sensitive user information.
“The claim that a misconfigured MinIO instance was granting access to an S3 bucket containing KYC data is completely untrue and does not comply with our system architecture or security protocols. We can confirm that our MinIO setup and cloud storage containers remain secure, and there was no unauthorized access to any sensitive user data.”
Hossein Amini, Security Engineer at Bit24.cash
While Amini assures that user data is safe, Cybernews encourages concerned users to seek support from the platform regarding this matter.
As crypto.news reported earlier, Bit24.cash, along with other Iranian cryptocurrency exchanges such as Wallex.ir, Excoino, and Aban Tether, accounted for 12% of the total domestic and international funds flowing to Iranian exchanges in 2022. According to the TRM Labs report, approximately 90.3% of counterparty funds sent to Iranian exchanges come from external exchanges, 4.9% from smart contracts, and 4% through non-custodial wallets.
