Track market-moving stories before they get noisy

HTX said on Aug. 18 that it is investigating small cryptocurrency transfers received by several addresses after community members attributed the deposits to the exchange.

Summary

HTX said its internal review found no official transfers or testing activity behind reported deposits. Users reported receiving small USDT deposits from addresses labeled as HTX wallets by blockchain services. HTX is examining whether address labels or transaction attribution errors created a misleading origin trail. No transaction list, verified victim count, confirmed loss, or poisoning campaign operator has been disclosed. Reports of frozen accounts remain unconfirmed by HTX and lack publicly available supporting case details. The exchange said its initial internal review found that its official channels had not initiated the transfers or conducted related testing. HTX is now examining the origin of the transactions and whether blockchain address labels or attribution methods produced a misleading connection.

Some users have described the transactions as “address poisoning.” Others reportedly said their accounts faced restrictions after receiving the funds. Neither description has been independently confirmed through transaction records, platform notices or findings from a blockchain security company.

HTX says it did not initiate the disputed transfers HTX responded after community members circulated screenshots of small deposits that appeared to come from exchange linked addresses. One user reportedly received 7.5 USDT in a Coinbase account before being asked to explain the source of the funds, according to a report.

A request for information does not necessarily mean an account has been frozen. Coinbase has not publicly addressed the reported case, and no affected user has published a complete platform notice showing a permanent restriction linked to the transfer.

HTX said it had “not conducted any related transfers or testing activities.” The exchange added that it would not speculate before completing its investigation. It promised to provide the community with confirmed information, although it did not set a deadline.

HTX investigates source of unsolicited deposits, source: X The statement did not identify the blockchain involved, the sending addresses or the transaction hashes. It also did not disclose how many recipients had reported deposits or whether any customer assets were at risk.

Small deposits do not prove address poisoning Address poisoning normally involves an attacker creating an address that resembles one previously used by a target. The attacker then sends a small or zero value transaction so that the lookalike address appears in the target’s transaction history.

The attacker hopes the user will later copy the planted address without checking every character. Chainalysis describes this transaction history manipulation in its security guide.

Small unsolicited transfers alone do not establish address poisoning. Investigators would need to determine whether the sender resembles a trusted counterparty and whether the transaction was intended to manipulate a recipient’s address history.

The current reports contain no verified evidence that recipients later sent assets to lookalike addresses. No losses have been confirmed. No security researcher has publicly connected the disputed transfers to a specific operator.

As previously reported, a user recently lost 100,000 USDT after copying a planted lookalike address from their transaction history. That case included a confirmed misdirected payment, unlike the activity HTX is investigating.

Wallet labels may explain the apparent HTX connection Blockchain transactions identify addresses, but they do not automatically identify the legal entity controlling each address. Explorers and analytics companies assign labels using disclosed ownership information, transaction patterns and address clustering.

Those methods can produce useful leads, but a displayed label is not conclusive proof that the named exchange authorized a transfer. Deposit addresses, consolidation wallets, payment processors and intermediary services can further complicate attribution.

HTX said its investigation would consider “address tagging” and the identification of onchain transfer sources. This leaves open the possibility that third party services attributed a sender to HTX incorrectly or without enough supporting evidence.

The exchange previously published a scam warning about unsolicited 0.001 USDT transfers. It advised users to inspect complete wallet addresses instead of relying on shortened address displays or transaction histories.

The present case also arrives amid wider concerns about automated compliance screening. In related coverage, users reported blocked transactions and frozen funds after compliance services flagged exposure to HTX linked addresses. Those earlier restrictions involved sanctions screening and do not prove a connection to the latest deposits.

Account freeze reports require further evidence Claims that some accounts were “frozen” remain unverified. No exchange has confirmed imposing restrictions because of the disputed transfers, and the available reports do not provide case numbers, notices or affected wallet addresses.

A platform may request information when an automated monitoring system detects an unfamiliar counterparty or a link to a flagged address. Such a review can delay access without proving misconduct by the recipient or the sending address.

The distinction matters because describing every compliance check as a freeze could overstate the event. It could also wrongly suggest that HTX users conducted a coordinated poisoning campaign when neither HTX nor an independent investigator has reached that conclusion.

HTX’s investigation will need to identify the sending addresses, establish who controlled them and explain why they made the transfers. Publishing transaction hashes would allow independent analysts to test the exchange attribution and search for lookalike address patterns.

Until then, users should avoid copying destination addresses from transaction histories. They should verify the full address, use saved address books where available and preserve transaction hashes or account notices for support teams. Interacting with an unsolicited token or unfamiliar contract may introduce separate security risks.

HTX said it would share further findings once confirmed. The exchange has not announced when the review will end or whether it plans to publish a technical report.

In recent months, Compound Finance has become one of the most popular lending platforms in the entire cryptoeconomy. Can it become the most popular?

To be sure, it remains to be seen if Compound will one day unseat Dai builders Maker atop the DeFi ecosystem, even if temporarily. Still, the project’s builders have recently been taking steps to make the “money lego” platform better and its users’ happier. That’s certainly a start.

For example, one of the bigger threads in Compound’s march toward maturity hit the limelight this week as attention gathered around its fresh audit. Specifically, the smart contract specialists at the OpenZeppelin project just published an audit on some of the Compound platform’s most important smart contracts.

⚠️ Here we present a summary of the @compoundfinance audit, including:

– System overview
– Privileged Roles and Future Direction
– Interest-free loans
– Counterproductive incentives
– Full audit reporthttps://t.co/OsGE6w3gnT

— OpenZeppelin (@OpenZeppelin) August 28, 2019

The good news? OpenZeppelin didn’t find any code issues that it deemed to be “critical.” But the auditors did find a series of lesser serious issues that helped the Ethereum community understand the fledgling Compound platform better.

Among these issues, one problem highlighted was that there are currently admin keys that could be used to compromise some of Compound’s tech.

Custodial Compound contracts pose a risk of *unsecured debt*

> cTokens used as collateral remain in the borrower's wallet but are non-transferable

> Admin could allow transfer of collateral cTokens… essentially enabling Compound debt to be undercollateralized https://t.co/jHzlwZgvQe

— Eva Beylin (@evabeylin) August 27, 2019

In response, Compound co-founder Robert Leshner later noted that the platform intended to evolve toward total decentralization.

“Absolutely; the FAQ […] and whitepaper […] are both very transparent about how the admin privileges work, and our goal to decentralize away from having an admin at all,” Leshner said on August 27th. 

Love ’em or hate ’em, Compound opening up their contracts for everyone to pick apart only works in their favor in the long run.

New Assets Being Voted In Like other cryptocurrency platforms, Compound only supports a select number of cryptocurrencies. But that number is about to get bigger.

That’s because Compound has opened up a voting period for its users to decide which digital assets they want to see on the platform next. The projects currently up for consideration include Maker, Tether, Decentraland, Huobi Token, Loom Network, Numeraire, OmiseGo, Paxos, and TrueUSD.

Voting has begun to select the next two Compound protocol assets!

????️ Make your selection: https://t.co/En6tOQffeo

???? Learn more: https://t.co/9uAeCVgcAD

⏱️ Voting is open for two weeks!

— Compound Labs (@compoundfinance) August 28, 2019

“Voting will last for 14 days, after which the 2 winning tokens will be added to the protocol following the creation of cToken integration contracts, successful security audits, and a determination of suitability,” the aforementioned Leshner said.

The Berlin Bump and Beyond Berlin Blockchain Week was earlier this month, and one of its events — ETHBerlin Zwei — saw no shortage of Hackathon projects built atop Compound. That gave the platform a tangible bump in usage.

According to tracker website DeFi Pulse, Compound has been steadily gaining on Maker’s DeFi dominance as of late. Of course, Maker still dominates more than 50 percent of the DeFi ecosystem, but Maker’s slice of the pie has been slowly declining as Compound has gained more attention.

2/ The total supply of DAI in the market has lowered around $14M in the last 90d thanks in part to CDPs moving to Compound and tools like @InstaDApp's Bridge. And so, the stability fee is starting to lower as a result. [TVL charts included for reference. Note difference in scale] pic.twitter.com/sckUjnPvL3

— DeFi Pulse (@defipulse) August 30, 2019

It’s not that one is more impressive than the other, rather that both are at the top of DeFi right now and Compound is notably gaining steam. With that said, Maker and Compound are far from enemies as the DeFi Pulse team has explained:

“For the time being, they appear to have a symbiotic relationship. Maker prints the DAI, Compound creates more demand for DAI in the market.”

Dharma Pivots to Compound On August 29th, Dharma — a top 10 DeFi project at present — announced that it was relaunching its cryptocurrency services upon having phased out its initial offering.

The twist? Dharma’s new services will rely on Compound’s liquidity pools. In moving away from crypto lending, the project’s first offering after the relaunch will be a savings product.

“Working with Compound allows Dharma to focus on the parts of the business which they do best, which in my view include design, product, and user experience, and instead outsource part of the stack,” Autonomous Partners founder and Dharma investor Arianna Simpson said on the news.

William M. Peaster

William M. Peaster is a professional writer and editor who specializes in the Ethereum, Dai, and Bitcoin beats in the cryptoeconomy. He's appeared in Blockonomi, Binance Academy, Bitsonline, and more. He enjoys tracking smart contracts, DAOs, dApps, and the Lightning Network. He's learning Solidity, too! Contact him on Telegram at @wmpeaster