Community Update
Security Breach and Next Steps (January 27th)
Dear Dimitra Community,
First, we would like to thank the community for your outstanding support over the last 24 hours. We recognize the difficulty and stress this situation has caused, and it’s clear that we have a community that truly stands together. Please know that we remain committed to transparency, keeping you informed every step of the way as the situation unfolds.
For those wanting to learn more, on the evening of January 26th, one of our cryptocurrency wallets was hacked. Our team is actively investigating the situation to determine the scope of the incident. We are committed to transparency and will provide updates, including the next steps, as soon as possible.
At this time, most centralized exchanges (CEX) have suspended deposits and withdrawals. Each exchange’s security team will decide how to respond, and their responses may vary. Additionally, the Dimitra Portal has been temporarily shut down during the investigation.
Details on the Breach
We had been subject to a virus, which led to a breach and tokens were taken from several wallets.
To prevent any harm to the smart contract, we minted all the remaining tokens and moved them to a secure wallet. These tokens will remain locked until we can arrange a secure service to release them at specific intervals.
The exchanges have frozen deposits and withdrawals, and exchange security teams may take additional actions as needed.
Exchange and Portal Status
- Centralized Exchanges (CEX): Most exchanges have suspended deposits and withdrawals. Each exchange’s security team will decide how to respond based on their internal assessments.
- Decentralized Exchanges (DEX): Decentralized exchanges like Uniswap remain active as these platforms cannot be frozen.
- Dimitra Portal: The portal has been temporarily shut down while we conduct a thorough security review.
What’s Next?
Our team, along with external experts, is conducting a detailed investigation to assess the breach and enhance security measures. Moving forward:
- Investigation Progress: We are working diligently to identify the full scope of the incident.
- Security Enhancements: We will implement stronger protections to prevent similar incidents in the future.
- Portal Reopening: The Dimitra Portal will remain offline until we are certain it is safe to turn it back on.
- Exchange Updates: Deposits and withdrawals on CEX platforms will resume once the investigation concludes and all necessary security measures are in place.
Our Commitment to Transparency
We understand your concerns and our team is committed to remaining transparent as investigations are underway.
For further updates, please refer to our ongoing Q&A discussions on our official Telegram channel, where our CEO and team are addressing community questions directly. We have also added a section below with current questions and answers.
Thank you for your continued support as we work to secure the platform and uphold the integrity of our mission.
Sincerely,
The Dimitra Team
Community Q&A
Q: Have all coin exchanges stopped trading?
A: Most exchanges have suspended deposits and withdrawals. Each exchange’s security team will decide how to respond.
Q: Can I still buy from Uniswap?
A: Yes you can buy from Uniswap.
Q: What will happen to the tokens we had in the exchange?
A: After the investigation is concluded, business will go on as usual. Deposits and withdrawals will be turned back on.
Q: What about the staked coins? Are they safe?
A: We have locked down the servers related to staking. At the moment, it looks unaffected. After concluding the investigation and the related risk mitigations, we will review every account change in detail. There is an approval step that greatly reduces the risk with staking.
Q: Will the project continue?
A: We are more than a project; we are a company operating all over the world. Our intent is to move forward and continue with our mission.
Q: If, for example, my wallet from the Dimitra Portal was hacked and all coins disappeared, is there any possibility of getting them back?
A: Did you have your multifactor authentication turned on? Did you receive an email saying that your wallet has been changed? We need to perform the investigation, but there is no evidence at the moment that staked tokens have been affected.
Q: Have the team sold any tokens?
A: Zero team members sold during this event.
Q: What time should we wait?
A: We cannot comment on CEX deposits until the investigation is complete. The deposits are blocked to prevent the thieves from depositing their tokens. This may create an opportunity to retrieve some of the stolen tokens.
Q: I cannot load the Portal website because it shows a hosting timeout. Is it down?
A: We locked out the firewall until the security review is complete. It doesn’t look like there was any risk in the preliminary review. All deposits and withdrawals are locked until the investigation is complete.
Q: Is the smart contract breached?
A: No, we minted the balance of the tokens yesterday and locked those tokens in a secure wallet. We will be working on a distribution mechanism after we conclude the investigation.
Q: What will happen to staking rewards?
A: Nothing has changed.
Q: Can we get a buyback?
A: Our new protocol is built to automate buybacks. More news is coming soon.
There are several legal issues associated with burns, our approved burn program is based on RWA program purchases, adding a new burn program requires extensive legal review across every country where we do business and approval to assure that we do not break any laws.