Cyber Incident Victim: Fetch.ai
Date:
Jun 2021
Location:
United Kingdom
Summary
Attackers compromised a U.K.-based artificial intelligence firm's cryptocurrency trading accounts on Binance, selling holdings at significantly reduced prices and transferring approximately $2.6 million in assets to third-party accounts. The London High Court ordered Binance to identify and freeze the attackers' accounts to recover traceable proceeds, with the exchange confirming its existing policy to restrict suspicious accounts and collaborating to reclaim lost funds. The incident involved unauthorized trading of multiple cryptocurrencies, including USDT and Bitcoin, resulting in substantial financial losses over a short period.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On June 6, 2021, attackers compromised accounts belonging to Fetch.ai, a U.K.-based artificial intelligence firm, on the Binance cryptocurrency exchange. The unauthorized parties gained access to Fetch.ai’s trading accounts, which held multiple cryptocurrencies including USDT (a dollar-pegged stablecoin), Binance Coin, and Bitcoin. The attackers executed trades at deliberately undervalued prices, selling Fetch.ai’s holdings rapidly and transferring the proceeds to third-party accounts believed to be controlled by the perpetrators. This activity resulted in losses exceeding $2.6 million over a short timeframe. The fraudulent trades exploited the operational design of Binance trading accounts, where counterparties remain unaware of the account holder’s identity during transactions. Fetch.ai subsequently filed a lawsuit against Binance, prompting the London High Court to intervene.
The London High Court ordered Binance to identify and freeze accounts holding the stolen assets, requiring the exchange to restrain recipients from disposing of traceable proceeds. Binance confirmed compliance with the order, citing existing security policies to freeze accounts involved in suspicious activity and emphasizing collaboration with Fetch.ai to recover lost funds. Court documents detailed that the attackers’ actions involved moving assets from Fetch.ai’s accounts to external accounts operated by or for the fraudsters. Concurrently, the broader cryptocurrency ecosystem faced another significant incident involving Poly Network’s $612 million breach, where Binance was among the blockchains receiving stolen funds—though this was unrelated to Fetch.ai’s case. Blockchain analysis firm Elliptic noted challenges in laundering large-scale stolen crypto assets, coincidentally reporting on darknet tools enabling criminals to test fund traceability around the time of Fetch.ai’s breach.