Crisis at Xeggex: Security Breach, User Concerns, and the Impact on Emerging Crypto Projects

Kristjan L
6 min readFeb 9, 2025

--

Recently, in development considered quite disconcerting within the camp of cryptocurrencies, Xeggex, a popular cryptocurrency exchange platform, suffered a huge operational set back. Reports emerged on February 04, 2025, that the site ceased serving users, thereby rendering many of them unable to access their accounts or manage their investments. It previously blamed this on a security vulnerability whereby the CEO’s account had been hacked and the database immediately disconnected from the network to limit further exploitation, it was understood. The extended security measure, however, led to wide-range login problems along with safety fears over users’ funds. Xeggex, known to trade multiple cryptocurrencies, including mainstream tokens like ETH, USDT, and BNB, has since been at the center of controversy after some users complained of seeing their account balance disappear or get taken away.

The exchange has now shut wallets down to secure the remaining funds on the platform as they try to carry out an investigation. Statements by Xeggex itself claim no funds moved, according to blockchain data, but that has done little to allay the growing sense of unease among its users. Crypto communities are voicing their complaints on social media platforms, such as X and Reddit. Some of them have gone so far as to speculate this is an “orchestrated rug pull” in which the platform is absconding with user money. The situation is still fluid at this moment, and anxious users wait for updates or a resolution by Xeggex.

Adding to the unfolding drama, Bitrace, a Regtech company specializing in cryptocurrency risk data analysis, has given insight into the situation.

Bitrace, which uses AI and big data to monitor blockchain activities, said in a tweet (https://x.com/Bitrace_team/status/1886826484217864594) that before the website of Xeggex went down, all ETH, USDT, and BNB mainstream tokens were cleared from all known business addresses of Xeggex.

This resulted in the sum value of Xeggex-held funds going down by $2 million. Currently, almost no stablecoin is sitting in the business addresses of Xeggex, while the remaining altcoins worth 4 million dollars remain in pre-specified addresses. Bitrace continues to follow the situation concerning Xeggex and advises users to be prepared for subsequent updates.

Request for Investigation

A petition on Change.org has been started in response to the issues with Xeggex: Demand for Immediate Investigation and Restitution for Victims of XeggeX Crypto Exchange The petition calls on law enforcement agencies, financial regulators, and the global cryptocurrency community to take immediate and in-depth action against Xeggex following recent events that have raised concerns over the security and management of users’ funds, and which have resulted in substantial financial losses among many investors.

This is a petition regarding the erosion of confidence in digital asset exchanges, as well as the exposure of risks that lie with unregulated platforms.

Immediate action is being called for the investigation and retrieval of funds. It is looking for restitution against the victims of fraud. It is aimed at bringing to the fore the problems of Xeggex users, pushing the management of the platform to take accountability.

Insight from a Former Business Partner

In a new twist in the ongoing saga surrounding Xeggex, a former business partner, Nayiem Willems (https://nayiem.com/), of the current owner of Xeggex has written a detailed, first-person account of his experiences on the platform in a post titled “Xeggex Hack”. Having been in a direct business relationship with the current owner before he broke off ties, this individual offers a rare insider’s glance into the operations and ethics of the management at Xeggex.

To determine, as Nayiem Willems explained, ‘it was due to basic disagreements over transparency, security practices, and business ethics’. They say even while being in partnership, there were so many red flags; one of them was how the funds were being transferred and ignored or waved away by the current owner, which is linked with security.

According to the ex-partner, all this was somehow expected due to the very insecure practices they witnessed in the service. He told stories of security updates delayed and uninstalled, user funds being treated like jokes, leaving vulnerabilities open that might have been exploited.

Besides, Nayiem Willems claims that Xeggex is not transparent in their activities; while working, financial reports were never shown, and there was a complete lack of accountability in how decisions had been made, especially with respect to fund management. A lack of transparency has now come to the fore in this crisis when users are strongly asking for clarity on their investments.

Indeed, this post from Nayiem Willems has fueled the fire with a suggestion that the problems at Xeggex might be far deeper than simply a security breach, hinting at systemic flaws in the firm’s culture and operational framework. Their commentary served as a lesson to the crypto community to keep watch and press for better security and transparency of exchanges, even more so those with questionable history or management.

However, there is reason to doubt the credibility of Nayiem Willems’ claims, as several Xeggex users have taken to social media to question the validity of his statements, suggesting potential biases or personal vendettas that might color his perspective on the situation.

Speculation on Involvement with NonKyc

Amidst the turmoil surrounding Xeggex, speculation has arisen on social media platforms about the potential involvement of NonKyc.io in the situation. NonKyc, another cryptocurrency exchange, had issued a statement on X, clarifying their position regarding Xeggex. They claim no ownership or legal relationship with Xeggex, stating they merely used Xeggex’s software as a base to develop their own platform. NonKyc also mentioned that one of their developers works for both companies, suggesting a cooperative development environment rather than any malintent.

However, this statement has been met with skepticism within the community. Users and observers have pointed out several concerns:

  • The fact that a developer works for both companies has raised questions about potential conflicts of interest or the possibility of insider actions that might have contributed to Xeggex’s current predicament.
  • Using Xeggex’s software as a foundation for NonKyc’s platform could imply shared vulnerabilities if Xeggex’s security was compromised. Critics argue that this connection might not be as innocuous as NonKyc suggests, especially if the security flaws were known to both entities.
  • The timing of NonKyc’s clarification has led some to speculate if it was a preemptive move to distance themselves from any fallout associated with Xeggex, suggesting they might have had foreknowledge of the situation.

On forums and social media, some users have expressed distrust, theorizing that NonKyc might be trying to cover up a deeper involvement or that their operations could be similarly at risk due to shared practices or personnel.

NonKyc has urged the community to remain calm and stated that they are committed to transparency and security, offering to engage with any official investigation to clear their name. Despite these assurances, the community remains vigilant, with some calling for a deeper probe into the relationship between NonKyc and Xeggex, especially given the shared developer and software origins.

Altcoin projects on Xeggex

The fallout from the Xeggex security breach and subsequent operational halt has far-reaching implications, particularly for the numerous small projects that launched on the platform. These projects, often startups or lesser-known cryptocurrencies, relied on Xeggex for visibility and liquidity, given its reputation for supporting emerging tokens. With the platform’s current crisis, many of these small projects are at risk of being permanently damaged or destroyed. The inability to trade or manage their tokens on Xeggex has not only halted their growth but also eroded investor confidence. This situation could lead to a loss of funding, reduced market presence, and in severe cases, the complete cessation of operations for these projects, as they struggle to find alternative platforms under such short notice and amidst the uncertainty surrounding Xeggex’s future.

What to do?

In light of the ongoing crisis, it is crucial for small projects that started on Xeggex to actively check their respective blockchains and monitor Xeggex’s main wallets for any movement of funds. This vigilance will aid in piecing together the full picture of the situation, helping these projects understand if and how their assets might have been affected. By analyzing blockchain transactions, they can ascertain whether any unauthorized transfers or withdrawals have occurred, which could further clarify the extent of the damage and assist in formulating recovery strategies or legal actions if necessary.

--

--

Kristjan L
Kristjan L

Written by Kristjan L

Manager, consultant, author, gamer, father, advertising grugru.

No responses yet