decrypt.co
Upbit, the largest centralized cryptocurrency exchange in South Korea, temporarily suspended deposits and withdrawals after reportedly mistaking a scam token for legitimate ones from Aptos (APT).
The freeze took place on Sunday when Upbit discovered an "abnormal deposit attempt" while monitoring flows of APT into and out of its wallet system, according to a statement. The company has since resumed account services, but cautioned users that there may be pricing differences when interacting with other exchanges after the suspension.
“There is a possibility that the price may change drastically when [APT] deposits and withdrawals resume. Please pay special attention to the price differences with other exchanges that occurred during the suspension of [APT] deposits and withdrawals," said the statement.
UpBit’s issues stemmed from a system error that misread a set of airdropped scam tokens as being the equivalent of legitimate ones, said Twitter user Definalist. The account reported that the scam tokens were linked to a fraudulent website called “ClaimAPT.com,” which airdropped them into almost 400,000 wallets, according to TraceMove.
UpBit's system reportedly misidentified the false tokens as legitimate ones through a typo in the code, according to an analysis by MingMingBBS that was shared by the Twitter account Definalist.
The writing in the fake APT tokens code reportedly led to a deposit of about $250 in affected accounts, something that Definalist said could have been worse had the scammers written the code to include two more decimals and increase the amount of airdropped to $25,000 each.
Amazing Korean exchange upbit incident today
1. The Largest S.Korean exchange @Official_Upbit , abruptly halted Aptos' deposits and withdrawals, citing a wallet system maintenance without any specific reason
2. Various Korean users have posted authentication claiming that they… pic.twitter.com/OjfCwhB4eV
— Definalist (@definalist) September 24, 2023
"If the scam token had a decimal of 8, all users would have received $25,000 instead of $250, leading to thousands of users dumping $25,000 worth of APT, causing significant disruption," said Definalist in a tweet.
The APT token currently has the 38th largest market capitalization at just over $1.2 billion with about $107 million in daily trading volumes, according to data from Coingecko.