Other

"Crypto.com Tells Loan Customers in 'Excluded' Countries to Repay by March 15"

2022-03-08 [vendor] Crypto.com calls back loans
Primary Source ↗

Incident Details

Crypto.com sent out an unexpected email to some users, apparently primarily in the EU, announcing that “Lending is no longer supported in your jurisdiction… [and] we are required to cancel your current loans”. The email stated that if a borrower was unable to repay their loans by March 15, seven days from the date the email was sent, “outstanding loans and the associated interest will be automatically repaid”. This seems like a tough timeline for borrowers, whose loans are twelve months long, and given people tend to spend the cash they’ve borrowed on something, rather than, say, hold on to it in case they need to suddenly repay a loan with a week’s notice.Reddit users from the UK, Germany, France, and Switzerland reported receiving the email, and those countries now all appear on the 40-entry-long list of countries not permitted to use Crypto.com’s lending services. One Reddit user wrote, “I have 7 days to pay a big loan, like big. If it gave us a month I could unstake and pay, but no, they give us 7 [days], I will get liquified and can’t do anything for it.” Other users were confused to receive the email when they didn’t have any loans on the platform, as it was worded in a way that they interpreted to mean they did.

Technical Details

Initial Attack Vector
Regulatory / legal action
Vendor / Product
Crypto.com calls back loans

Timeline

  1. 2022-03-08 Breach occurred
  2. 2022-03-08 Publicly disclosed