$500 000+ USD

MAY 2019

NORWAY

BITCOINS NORWAY

DESCRIPTION OF EVENTS

"Bitcoin Norway is a cryptocurrency exchange that claims to have served over 25,000 Norwegians since 2013." "Bitcoins Norway is based in Stavanger." "[I]n 2012, before anyone had heard of bitcoin and cryptocurrency, the Stavanger man Ole-Andre Torjussen founded the company Bitcoins Norway." "The services offered by Bitcoins Norway allow users to trade digital currencies with each other and by that, exchange the value of digital Currencies in currency. Bitcoins Norge AS is owned by it's customers and employees. Our goal is to be the desired trading platform for cryptocurrencies in Norway." "In 2017, [Stavenger] achieved a pre-tax profit of NOK 3.6 million."

 

"Newly launched Norwegian Bitcoin and Litecoin exchange platform bitcoinsnorway.com offers fast transaction times with low fees worldwide. The user friendly site allows members to securely buy, sell and hold Bitcoin and Litecoin. Bitcoins Norway also pledge to give 5% of their profits to reputable charity organisations fighting poverty. Bitcoins Norway values customer service and offers the competence and security necessary to ensure an optimal trading experience with the company slogan “Be a part of the Bitcoin adventure!”"

 

"The trading platform Bitcoins Norway takes only a 0.5% trading fee while executing transfers in less than 24 hours, anyone around the globe can have their money delivered directly to their bank in 24-48 hours. Decentralised digital currencies Bitcoin and Litecoin are regarded as income in Norway and Bitcoins Norway takes all legal actions to prevent money laundering according to Norwegian law."

 

"AlphaPoint is the white label platform for exchanges, brokerages and tokenization of assets." "AlphaPoint is based in New York and provides a White Label trading and technology platform that enables prospective crypto exchange owners to buy an off the shelf solution including matching engines, an order management system, hot and cold wallets, security and account administration – while skinning it with their own ‘front end’ interface."

 

"We have developed financial technology solutions for institutional operators providing access to digital assets and cryptocurrencies globally. Our comprehensive set of tools includes: Exchange Technology (Matching Engine, Order Management System), Liquidity Solutions (Remarketer, Market Making), Custody (Wallets, Risk Management), and Yield (Lending, Staking, Interest-Bearing Accounts). These tools have been used to deliver innovative financial products and services by over 150 clients including: Exchange Operators, Brokerages, OTC Desks, Liquidity Providers & Market Makers, and Security Token (STO) Exchanges."

 

"Detailing the Bitcoins Norway saga, website Kryptografen reported that AlphaPoint had told the exchange on May 1 that all ‘hot wallets’ had been robbed, but the funds were covered by insurance."

 

"Norwegian exchange Bitcoins Norway blew the whistle on the attacks on July 1, initially reporting the loss of half a million USD worth of crypto from attacks beginning in early May." "It now says that figure represents just “a small proportion of the total” and that all of its hot wallet funds were taken."

 

“AlphaPoint was hit by so-called phishing and SIM swap scams,” the company confirmed in an email to Norwegian website E24 on July 9.

 

"Bitcoins Norway, however, did not inform users until two months later after the board learnt that AlphaPoint “had been subjected to several serious computer attacks”, according to owner Ole-André Torjussen."

 

"Hello and thank you for your inquiry, We are currently in great demand and apologize for the long response time. Bitcoins Norway is exposed to an extraordinary situation that is completely beyond our control. We examine all possibilities to take care of our customers' interests in the best possible way."

 

"About six years I have with bitcoinsnorway. We have teamed up to establish a secure cryptocurrency trading platform for us Norwegians, and we have chosen to enter into an agreement with AlphaPoint for the delivery of the trading platform as they are considered one of the most recognized providers in the market, I dare to understand that It is a situation that eludes both my control and that of the company, and I guarantee you that I will do anything to solve the situation in a way that protects you."

 

"Several users write that they are not sure who's really behind it, and that this is a very sophisticated phishing attempt, especially as customers are asked to enter bank account numbers and birth numbers in a Google Docs form attached to the message receive four hours to resist the sale of their cryptocurrency."

 

"It is also stated that Bitcoins Norway was already informed about attacks on AlphaPoint on May 7, but was reassured that the FBI and other police officers were in the case and that Alphapoint had insurance." “AlphaPoint assured Bitcoins Norway that we will compensate them … we stand by our customers.”

 

"However, there has been recent information about ongoing vulnerabilities in the AlphaPoints technology and uncertainties as to whether AlphaPoint and its insurance company will be able to fully meet customer requirements Bitcoins Norway no longer advisable to wait for developments in AlphaPoint."

 

"The insurance does not cover financial losses due to speculation in a market or losses due to errors in a Bitcoin transaction, says Information Director Jon Berge in the insurance company." "He further states that the insurance mainly covers the company in terms of assistance in attacking and restoring systems." "However, it does not cover any damage that the customer had to accept in a speculation market, says Berge."

 

"I really hope that this is not the end for Bitcoins Norway. I have been working with this company for several years and I have always had the vision that the Norwegians will use the cryptocurrencies to a greater extent."

 

"Bitcoins Norway has been under investigation by Økokrim after the hacker attacks the platform was postponed in the spring and summer of 2019. [On April 23rd, 2021], the press release came from Økokrim that the reviews against the company are being dropped."

 

"Ecocrime has come to the conclusion that there is no basis for reprimanding any of the circumstances. With regard to the suspicion of embezzlement, the conclusion is that nothing criminal has happened. For the suspicion that concerned fraud, the evidence situation is such that the case is left to the position of the evidence."

Bitcoins Norway (and other services) gave their funds to AlphaPoint in a white label arrangement. Luckily, they did not give their entire cold storage.

 

AlphaPoint was breached multiple times, losing both customer data and platform funds. For some reason, this prompted the liquidation of all bitcoin on the Bitcoins Norway platform, with the proceeds of the liquidation paid to affected users.

 

AlphaPoint had insurance, however due to the way the insurance contract was written, it appears there was no payout which occured. Customers were reimbursed based on the cold storage funds.

 

Investigation has concluded that no fraud or embezzlement occurred.

HOW COULD THIS HAVE BEEN PREVENTED?

This joins a number of examples showing that, in general, third party insurance is ineffective at covering most real cases of loss. Our framework proposes an industry insurance fund, which allows for enhanced coverage and removes the misalignment of interests.

 

A key part of this case involved the breach of a third party. An increased incentive to exploit exists when multiple platforms pool funds their hot wallet funds with the same entity, and hot wallets have historically shown themselves very likely to be breached.

 

Check Our Framework For Safe Secure Exchange Platforms

Sources And Further Reading

 For questions or enquiries, email info@quadrigainitiative.com.

Get Social

  • email
  • reddit
  • telegram
  • Twitter

© 2021 Quadriga Initiative. Your use of this site/service accepts the Terms of Use and Privacy Policy. This site is not associated with Ernst & Young, Miller Thompson, or the Official Committee of Affected Users. Hosted in Canada by HosterBox.