GateHub Ltd.

GateHub operates as a cryptocurrency wallet service provider under the corporate entity GateHub Ltd., headquartered in the United Kingdom. Its core offering centers on facilitating the secure storage and management of digital assets for its users, specifically including the Ripple (XRP) cryptocurrency. The service enables users to interact with their cryptocurrency holdings through digital wallets accessible via its platform. While primarily known for wallet services, the platform's functionality involves processing transactions initiated by users through its systems.

The organisation gained significant attention due to a major security incident occurring on June 1, 2019. Cybercriminals successfully stole approximately $10 million worth of Ripple (XRP) from GateHub users. The attackers exploited vulnerabilities by utilizing valid API access tokens originating from a limited set of compromised IP addresses. GateHub's investigation found no evidence of brute force attacks or unauthorized logins directly compromising user accounts. Instead, heightened monitoring detected increased suspicious API activity, leading the company to disable all existing access tokens, an action that effectively halted further thefts. The precise method by which the attackers decrypted the necessary secret keys to access funds remains undetermined, though potential contributing factors considered include historical database leaks or underlying issues with key management practices. Law enforcement agencies were engaged in an ongoing investigation into the breach following its discovery.