ONUS
Hack or exploit on Dec 11, 2021 · Ransomware
What happened
The payment system of ONUS, the largest cryptocurrency trading platform in Vietnam, running a vulnerable version of Log4j suffered a cyber attack. Cyclos notified ONUS to repair the system on December 13, but it was too late. Although ONUS has fixed the security loopholes in the Cyclos instance, the window of loopholes allowed attackers to successfully steal data from sensitive databases. The stolen database contained nearly 2 million user data, including KYC (Know Your Customer) data, hashed passwords, etc. Subsequently, the attacker asked ONUS to pay a ransom of 5 million, otherwise the stolen data would be made public. On December 25, because ONUS did not pay the full ransom, the attackers sold customer data on the dark web data exchange market.
Details
- Date
- Dec 11, 2021
- Kind
- Hack or exploit
- Method
- Ransomware
- How in
- Smart contract bug
- Target
- Centralized exchange
- Chains
- not stated
Reported by
Related incidents
JBS 2021 · Hack or exploit · $11M
Colonial Pipeline 2021 · Hack or exploit · $2.7M
MediaMarkt 2021 · Hack or exploit · undisclosed
Acer 2021 · Hack or exploit · undisclosed
SwanBluechip, "ONUS hack, Dec 11, 2021: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6fea86c53b/ (data as of 2026-10-31).