Crypto Lending

Moola Market attacker returns most of $9M looted for $500K bounty

The attacker has scored about a half-million dollar “bug bounty” after choosing to return a majority of the cryptocurrency they exploited from the Celo-based lending protocol.

An attacker has returned just over 93% of the more than $9 million worth of cryptocurrencies they exploited from the Celo blockchain-based decentralized finance (DeFi) lending protocol Moola Market.

At around 6:00 pm UTC on Oct. 18, the Moola Market team tweeted it was investigating an incident and had paused all activity, adding it had contacted authorities and offered a bug bounty to the exploiter if funds were returned within 24 hours.

Analysis of the exploit by Web3 security company Hacken shows the attacker manipulated the price of the protocols’ low-liquidity native MOO token by initially purchasing around $45,000 worth and depositing it as collateral to borrow Celo (CELO).

The borrowed CELO, along with further CELO provided by the attacker, was then used as collateral to borrow more MOO, driving up the token’s price. The attacker continued repeating this until the MOO token price had increased by 6,400%.

With the inflated token price, the attacker was able to borrow $6.6 million worth of CELO, $1.2 million of MOO, along with $740,000 of Cello Euros (cEUR) and $644,000 Celo Dollars (cUSD), all worth multiples more than their initial posted collateral resulting in the protocol’s loss of around $9.1 million.

Five hours after the initial confirmation of the exploit, Moola Market tweeted it had received just over 93% of the funds exploited, with the attacker seemingly keeping the rest, making around $500,000 as a bug bounty.

Moola Market did not immediately respond to Cointelegraph’s request for comment.

The attack draws similarities to the $117 million exploit suffered by Mango Markets on Oct. 11, in which Avraham Eisenberg and his team manipulated the price of the Solana-based DeFi protocols’ native token to borrow cryptocurrencies with an undercollateralized backing. Eisenberg negotiated to keep $47 million as a “bounty.”

Related: BNB Chain responds with next steps for cross-chain security after network exploit

Multichain cryptocurrency wallet BitKeep also suffered an exploit late on Oct. 17 with an attacker making off with $1 million worth of Binance Coin (BNB) through a service used to swap tokens BitKeep says it will fully reimburse any affected users.

The attacks are the latest in a series of exploits to have taken place in October which has also shaped up to be the biggest month ever for hacking activity with the total hacked value reaching around $718 million up until Oct. 12 according to analytics firm Chanalysis.

NEXO risks 50% drop due to regulatory pressure and investor concerns

Analysts fear NEXO price could come under pressure if regulatory action in the United States begins to intensify.

Crypto lending firm Nexo is at risk of losing half of the valuation of its native token by the end of 2022 as doubts about its potential insolvency grow in the market.

Is Nexo too centralized?

For the unversed: Eight U.S. states filed a cease-and-desist order against Nexo on Sep. 26, alleging that the firm offers unregistered securities to investors without alerting them about the risks of the financial products.

In particular, regulators in Kentucky accused Nexo of being insolvent, noting that without its namesake native token, NEXO, the firm’s “liabilities would exceed its assets.” As of July 31, Nexo had 959,089,286 NEXO in its reserves — 95.9% of all tokens in existence.

“This is a big, big, big problem because a very basic market analysis demonstrates that Nexo would be unable to monetize a significant chunk of these tokens,” noted Mike Burgersburg, an independent market analyst and author of the Dirty Bubble Media Substack, adding:

“Given that fact, the true value of the $NEXO tokens on Nexo’s balance sheet is likely close to $0.”

Comparisons with Celsius

Burgersburg also alleged that Nexo faces insolvency risks because it holds the vast majority of NEXO’s token supply on its platform. He drew comparisons to Celsius Network, a now-defunct crypto lending firm that owned more than 50% of its native token, CEL.

The top 100 NEXO holders collectively own 95.53% token supply. Source: Etherscan

Celsius ended up holding over 90% of the total CEL tokens in circulation after attracting deposits and collateral from customers. This made CEL extremely illiquid and, thus, volatile. In other words, CEL became a deeply imperfect asset for patching Celsius’ troubling balance sheets.

“NEXO token is even more illiquid than the bankrupt Celsius Network’s CEL token,” warned Burgersburg, noting that the token’s average daily trading volume comes to less than 1% of its market capitalization.

However, a Nexo spokesperson denied the allegations, clarifying that the data they provided to Kentucky regulators was for one of the Nexo Group’s entities. 

“We can confirm that on a consolidated basis, NEXO tokens represent less than 10% of the company’s total assets,” they told Cointelegraph, adding:

“That, in return, exceeds the company liabilities even when excluding the company’s net position in NEXO tokens.”

As to why Nexo holds more than 90% of the NEXO supply, the firm’s spokesperson cited the token’s economics and utility, saying that they create natural incentives for clients to keep their tokens on the platform.

“In addition to earning higher interest rates on their digital asset balances by holding NEXO tokens on the Nexo platform, clients can use NEXO tokens as collateral, earn interest on them and exchange them directly on the Nexo platform,” they explained, adding:

“The same is true for the tokenomics of companies with similar value propositions such as FTT, BNB and CRO, held predominantly on FTX, Binance and Crypto.com, respectively.”

NEXO price could get rocky

The fear, uncertainty and doubt surrounding the rumors of market volatility or stringent regulation against crypto lending platforms could create negative investment sentiments toward NEXO. Unfortunately, the token’s technical setup suggests the same.

Related: Nexo acquires stake in US chartered bank

Notably, NEXO’s price has been forming what appears to be an ascending triangle on its longer-timeframe charts since June 12. Ascending triangles are considered bearish continuation patterns in a downtrend, which makes NEXO susceptible to extreme price declines.

By the rule of technical analysis, an ascending triangle resolves after the price breaks below its lower trendline and continues falling in the same direction until it reaches the level that is at length equal to the triangle’s maximum height.

This setup is illustrated in the chart below.

NEXO/USD 3-day price chart featuring ascending triangle breakdown setup. Source: TradingView

In the event that the pattern confirms, the price of NEXO could fall toward $0.47, down about 50% from its current price.

The views and opinions expressed here are solely those of the author and do not necessarily reflect the views of Cointelegraph.com. Every investment and trading move involves risk, you should conduct your own research when making a decision.

Nexo ‘surprised’ by state regulators’ actions, says co-founder

Kalin Metodiev emphasized that Nexo has been navigating through conversations with regulators for the past couple of years to ensure compliance, and was surprised that this news was “thrown out there in public.”

Kalin Metodiev, the co-founder and managing partner of crypto lender Nexo, stated his firm was “surprised” by the way in which eight state regulators publicly took action against it for securities violations.

Earlier this week, the California Department of Financial Protection & Innovation (DFPI) filed a desist and refrain order against Nexo’s Earn Interest Product, claiming the company was offering a security product that had not been cleared by the government for sale in the form of an investment contract.

The DFPI also stated that it was joining regulators from seven other states in taking action against the company, including Kentucky, New York, Maryland, Oklahoma, South Carolina, Washington and Vermont.

Speaking with Cointelegraph at Token2049, Metodiev explained that Nexo was caught off guard by the latest regulatory push back, as it has been “trying to be responsible” by engaging in direct conversations with the regulators such as the Securities and Exchange Commission (SEC) for quite some time.

“We were a little surprised by this news being thrown out there in public, you know, because this isn’t a process that just started this week,” he said, adding that:

“We have worked with our legal advisors in the U.S. that we have used for the last couple of years to navigate us specifically through these waters in these conversations.”

Kalin Metodiev, the co-founder and managing partner of crypto lender Nexo

Metodiev said Nexo also communicated to the SEC earlier this year that it was “voluntarily” discontinuing services for new U.S. customers, suggesting the firm was working in good faith and aiming to be compliant with local regulations.

The product has not been available to new users in the United States since Feb. 19, and existing U.S. account holders were unable to make new deposits into their accounts.

“The event that made us make the decision was actually the SEC ruling against BlockFi in February. The moment we saw that we established contact with the SEC, and we communicated that we’re voluntarily discontinuing, taking money from U.S. customers. And we haven’t been working with new customers for our interest generating product.”

Ultimately this hasn’t put Nexo off over providing services in the United States. However, as the firm will continue to remain in conversations with regulators over its crypto offerings.

Metodiev also highlighted that the company is looking at U.S. expansion through other avenues, pointing to Nexo acquiring a stake in Hulett Bancorp this week, a holding company that owns the federally chartered Summit National Bank.

Nexo has also been out on the look out for crypto company acquisitions, with Metodiev noting that the firm has had discussions with a lot of liquidity troubled firms in the bear market, even the likes of Voyager Digital and Celsius.

Related: FTX reportedly considers bailing out Celsius via asset bid

While he stated discussions had been going well with various firms, he didn’t provide any concrete details on any deals that could be in the works. Metodiev suggested it had been priced out of a Voyager deal, as its $1.4 billion asset valuation that FTX snapped it up for, became too high for Nexo.

“If the opportunity becomes too rich for us, as I mentioned, our risk management, kicks in and we say, you know, we’re not sure that we can break even on this. We want to help the people and the platform, but at the same time, it needs to be a normal business assessment for us,” he said.

Celsius Network is bankrupt, so why is CEL price up 4,000% in two months?

Takeover rumors and an ongoing short squeeze help CEL price rally but is there enough momentum for more upside?

Crypto lending platform Celsius Network has an approximately $1.2 billion gap in its balance sheet, with most liabilities owed to its users. In addition, the firm has filed for bankruptcy protection, so its future looks bleak.

Still, Celsius Network’s native utility token CEL has soared in valuation by over 4,100% in the last two months, reaching around $3.93 on Aug. 13 compared to its mid-June bottom of $0.093.

In comparison, top coins Bitcoin (BTC) and Ether (ETH) rallied 40% and 130% in the same period.

CEL/USD daily price chart. Source: TradingView

Takeover rumors behind CEL explosion?

Technically, the price rally made CEL an excessively valued token in early August when its relative strength index (RSI) crossed above the 70 thresholds.

Takeover rumors appear to be behind CEL’s upside strength. Notably, Ripple wants to purchase Celsius Network’s assets, according to an anonymous source cited by Reuters on Aug. 10.

CEL’s price more than doubled after the piece of news hit the wire.

In July, rumors also surfaced about Goldman Sachs’ intention to acquire Celsius Network for $2 billion. CEL was changing hands for as low as $0.39 around that time.

CEL price short squeeze

An army of retail traders also appears to be behind the CEL’s giant upside push in the last two months.

Some traders have organized a short squeeze to limit CEL’s downside prospects. A short squeeze is when an asset’s price rises suddenly, forcing short sellers to buy back the asset at a higher price to close their positions.

It is possible to create a short squeeze because of CEL’s lowering circulating supply, primarily due to the freeze on Celsius Network’s token transfers.

Interestingly, FTX had about 5.1 million CEL tokens on Aug. 13, approximately 90% of all the total circulation across exchanges. Meanwhile, the amount of open short positions on the exchange was around 2.66 million CEL versus the monthly high of 2.96 million CEL on Aug. 11.

FTX sport short. Source: Legacy Synthesis

In other words, short traders have closed about 300,000 CEL positions in just two days.

What’s next for Celsius toke?

Short squeezes are hard to sustain over a long period, history shows.

Such prospects put CEL at risks of facing extreme correction in the coming weeks or months. As said, the token is already overbought, which further adds up to the downside outlook. 

CEL/USD three-day price chart. Source: TradingView

Drawing a Fibonacci retracement graph from $6.50-swing high to $0.39-swing low churns out interim support and resistance levels for CEL. Notably, the token now eyes a breakout above its 0.618 Fib line at around $4.21, with its upside target at $5.25, up 45% from the price on August 13.

Related: Crypto markets bounced and sentiment improved, but retail has yet to FOMO

Conversely, a break below the support level at the 0.5 Fib line at around $3.48 risks crashing CEL toward $2.75, down 25% from the current price level.

The views and opinions expressed here are solely those of the author and do not necessarily reflect the views of Cointelegraph.com. Every investment and trading move involves risk, you should conduct your own research when making a decision.

California regulator investigating crypto interest accounts

The regulator also said, in its view, that certain crypto interest account providers were providing unregistered securities, such as BlockFi and Voyager.

The California Department of Financial Protection and Innovation (DFPI) has warned consumers to “exercise extreme caution” when dealing with interest-bearing crypto-asset accounts.

The DFPI stated that it is investigating multiple crypto interest account providers to determine whether they are “violating laws under the Department’s jurisdiction.”

In a Tuesday note, the DFPI emphasized that crypto-interest account providers “are not governed by the same rules and protections as banks and credit unions” and that some platforms are “preventing customers from withdrawing from and transferring between their accounts:”

“The Department warns California consumers and investors that many crypto-interest account providers may not have adequately disclosed risks customers face when they deposit crypto assets onto these platforms.”

“Consumers are encouraged to exercise extreme caution before responding to any solicitation offering investment or financial services,” the DFPI added.

The DFPI also said that, in its view, certain crypto-interest account providers have been providing unregistered securities, pointing to two cease and desist orders it recently issued to BlockFi and Voyager to stop their offerings in California.

The warning comes in response to crypto interest account providers such as Celsius Network and Voyager Digital both locking up customer assets over severe liquidity issues amid a crypto bear market.

As it stands, customer funds of both platforms have been locked up for several weeks, with the fate of their depositors’ holdings still unclear.

Voyager has, at least, outlined a potential recovery plan after post-bankruptcy restructuring, which would allow depositors to receive a combination of Voyager tokens, cryptocurrencies, “common shares in the newly reorganized company,” and funds from any proceedings with Three Arrows Capital (3AC).

However, the company has also tentatively suggested that it may not be able to make all users whole again.

Related: Investors lament potentially lost ‘millions’ on Voyager bankruptcy

In a blog post on Monday, Voyager stated that “the exact numbers will depend on what happens in the restructuring process and the recovery of 3AC assets.”

Depositors weren’t happy, with Twitter user SizzleMcAffy seemingly echoing the DFPI’s concerns about risk disclosures:

“If I’d known that this platform could freeze my assets without consent, I’d never have opened an account. It’s crazy that you all can use our assets to prop your value up. This kind of behavior is going to severely damage the crypto industry.”