Days after disclosing that it had been the target of a hacking incident, digital currency exchange ShapeShift said it now believes the theft was an inside job.
In a post on Reddit, CEO Eric Voorhees stated that the firm had suspected the hack was supported by a former employee, whose name and position was not disclosed.
Voorhees wrote:
“Since the investigation into the ShapeShift hack last week started, we had suspicion that someone previously on the team was involved, and that this person assisted an outside hacker. We are confident now that is is indeed the case.”
The exchange announced the hack last week, which resulted in the theft of an undisclosed amount from the service’s connected wallets.
Voorhees further stated that refunds for pending orders remain held and “are in the process of being resolved”. When the exchange service announced the hack, Voorhees said that refunds would be processed within 24 hours.
After posting the latest update, Voorhees later wrote that the refunds were being held in a bid to avoid fraud.
The CEO went on to reiterate that a detailed post-mortem of the incident would be published in the future, though he did not offer a specific date beyond “the appropriate time”.
ShapeShift is currently working with Toronto-based blockchain consultancy Ledger Labs during its investigation of the hack, according to the update.
Image via Shutterstock
Disclaimer: CoinDesk is a subsidiary of Digital Currency Group, which has an ownership stake in ShapeShift.