Gemini, a cryptocurrency exchange, is being sued by IRA Financial Trust for neglecting security, which led to a theft of $36 million from customers' accounts in February
Image: Shutterstock
IRA Financial Trust, a self-directed asset retirement and pension account provider, filed a lawsuit against Gemini, a crypto exchange platform, for being negligent about the security of the customers' assets during an exploit.
IRA’s client accounts were held in the custody of the exchange. A breach took place on February 8, when crypto assets worth $36 million were withdrawn from customer accounts without legal authorisation during the exploit.
Ever since the lawsuit was filed, both the organisations have been blaming one another for the loss of funds. Additionally, the hack occurred around the same time as a fake 911 call that diverted many of IRA Financial Trust's employees from their work.
Gemini has set up many security features like fraud detection algorithms, two-factor authentication and whitelisting of withdrawal addresses to protect their overall system from single-point failures. Still, IRA Financial Trust has claimed that a single-point failure did occur in Gemini's systems.
They claimed that a master key exists that gives access to the customers' accounts that could override all built-in security measures within the exchange. The claim also stated that "Hackers were able to get possession of the IRA's master key by committing crimes."