Scandal over the handling of cybercrime cases by centralized exchange platforms (Centralized Exchange) has once again triggered strong condemnation from the global crypto community. A well-known CEX platform was reportedly threatened with legal action via email against a hack victim who was fighting for their rights. This controversial move was taken by the exchange after the victim officially reported the asset theft incident and urged the freezing of the perpetrator’s funds—actions the community views as a form of structural intimidation and as a failure to provide protection to consumers.
The root of this case began with a large-scale hacking incident that occurred on August 18, 2025. At that time, the victim became the target of an Atomic macOS Stealer (AMOS) malware attack, resulting in digital assets worth $250,000—or the equivalent of Rp4 billion—being drained. Based on on-chain tracking data, the hackers immediately moved all stolen funds from the victim’s wallet to several deposit addresses on the CEX. The perpetrator is strongly suspected of using KYC-mule accounts (fake identities obtained through illegal purchases in dark markets) to deceive the platform’s verification system.
The platform’s passive stance, which then shifts to attacking the victim with a legal narrative, underscores the latent risk of centralized oversight systems that are slow to mitigate money laundering resulting from criminal activities. This event serves as a fatal reminder for the community about the importance of full digital sovereignty. In the Web3 ecosystem, the core principle remains unchanged: secure your own assets through self-custody methods, avoid keeping large amounts of capital on a custodian exchange, and strengthen device protection against infostealer threats.
Reference: ZachXBT
#CryptoSecurity #AtomicStealer #CEXWarning #SelfCustody #Web3Security