On Friday, February 9, 2018, Italian cryptocurrency exchange BitGrail announced that “internal checks revealed unauthorized transactions which led to a 17 million Nano [XRB] shortfall, an amount forming part of the wallet managed by BitGrail.” The shortfall when reported was allegedly worth $170 million and has presumably rendered BitGrail insolvent, despite the fact that the other wallets and currencies that the exchange has were purportedly untouched.
The 9:30 p.m. UTC announcement by the Florence-based exchange gives some cause for circumspection. The founder of the exchange, Francesco “The Bomber” Firano, fired off salvos on Twitter in defense of the loss. His defense rang hollow for BitGrail customers, however, as Firano had noted the problem a day prior but withheld disclosure to authorities, users and the public while trying to work through the issue with the Nano team.
The “Hack”?
When news of the lost coins broke, BitGrail released a statement citing “unauthorized transactions” that were later confirmed by Firano to be the result of a hack. However, it appears many users have taken to Twitter to accuse Firano and BitGrail of committing fraud, with some positing that withdrawals have been severely limited on the exchange for months across multiple coins while transaction fees had increased. The coins lost represent approximately 14 percent of the total outstanding value of Nano mined.
However, there is some dispute (discussed below) on what actually caused the loss of coins. Whether it was an error in the BitGrail system, a planned exit scam or a hack from outsiders, taking or keeping the ill-gotten tokens seems ill-advised. The percentage of coins taken represents five times the current daily trading volume of Nano and would require careful offloading to avoid driving the price down by selling the coins.
Any scenario in which those lost coins could be dumped prior to the Nano coin gaining greater stability and trading volume forecasts a tumultuous time for the Nano team.
Nano Coin
The Nano coin, previously known as RaiBlocks, is a coin with a low level of liquidity that only trades on a few exchanges, (previously) including BitGrail. At the time of this writing, CoinMarketCap lists the volume for the coin at $34 million over the trailing 24 hours. The XRB coin has spiked as high as $31.14 on January 2, 2018, and currently sits at $9.75. Nano hosted its first Meetup on February 6, 2018, and launched its iOS wallet in beta on February 5, 2018.
BitGrail vs. Nano
Relations between the coin and the exchange disintegrated over the weekend with Firano accusing the Nano team of libel and threatening to call the police “for irresponsible behavior,” while Nano retaliated in a “tell all” Medium post. In a de-evolution of relations, Nano core team member Zack Shapiro (in a deleted tweet to user @jsmoove08) defended BitGrail a day prior to the exchange’s announcement.
The Nano team issued this announcement in response to the news. The team started with:
From our own preliminary investigation, no double spending was detected on the ledger and we have no reason to believe the loss was due to an issue in the Nano protocol. The problems appear to be related to BitGrail’s software. We had no knowledge of BitGrail’s insolvency prior to February 8th.
It concluded with this accusation:
We now have sufficient reason to believe that Firano has been misleading the Nano Core Team and the community regarding the solvency of the BitGrail exchange for a significant period of time.
Reactions from Firano were expectedly harsh, including one tweet where he stated:
In the wake of the unfounded accusations made against me by the dev team and of the dissemination of private conversations that compromise police investigations, BitGrail s.r.l. is forced to contact the police in order to protect its rights and users.
It should be noted that the Nano team relayed through its Medium post that they would “not be responding to individual posts or accusations by Firano regarding this situation.”
As BitGrail was one of the few exchanges that had been accepting Nano, the coin is now facing trading volume declines, down from the $50 million reported by the Wall Street Journal on February 10, 2018.
Nano also linked a pdf of a private conversation between Firano and Nano core team members Shapiro and Colin LeMahieu. The chat shows Firano’s insistence that the loss of Nano was due to an issue with corrupted time/date stamps of the errant transactions and suggested the fault lay with Nano as non-Nano wallets remained intact. Shapiro and LeMahieu disputed this claim. Firano also asked if the stolen coins could be forked in order to recover the “stolen” Nano from the burned address. The dev team refused to acknowledge a fork as a possible solution.
Firano stated in the chat that he first noticed the bug eight hours prior to the conversation with Shapiro and LeMahieu. Shapiro challenged Firano’s timeline, asking, “If withdrawals have been closed for the last month, how did you not notice this? Someone with[sic] allegedly withdrawing for weeks according to you via this ‘hack.’”
Social Media Reacts
Users on social media seem to have sided with Nano on events, accepting the narrative that a bug in the javascript for the client-side interface allowed for wallets to withdrawal more coins than they had on the exchange. Others, though, were just as furious with the Nano dev team for supporting BitGrail in the weeks leading up to the loss of funds.
Regardless of fault, the turmoil caused by the loss of $170 million worth of Nano on the BitGrail exchange has left both the exchange and the dev team faced with accusations, angry customers and little recourse for those affected.