Gemini Trust Co.’s lack of sufficient precautions resulted in retirement-account holders losing about $36 million in Bitcoin and Ether when the master key was hacked, according to IRA Financial Trust in a new complaint.
According to a complaint filed Monday in the United States District Court for the Southern District of New York, Gemini, a cryptocurrency exchange founded by Cameron and Tyler Winkelvoss.
Gemini was accused of making misrepresentations about two-factor authentication and other safeguards that were supposed to protect customer accounts. Customers can actively trade cryptocurrency in their retirement funds using an IRA.
In September 2019, it reached an arrangement with Gemini that allowed IRA members to trade Bitcoin and Ether, the two largest cryptocurrencies, directly.
Gemini failed to state the power of the master key
Gemini provided IRA with a master key, granting IRA authority over its customer accounts. A person in possession of a crypto master key can circumvent security mechanisms such as multi-factor authentication.
When hackers gained access to IRA’s master key in February, they were able to transfer $36 million in cryptocurrency into their own IRA account.
The hackers eventually cashed out since they were able to circumvent all security processes, according to the complaint filed by the South Dakota-based IRA.
“Gemini never informed IRA about the power of this master key.”
The complaint stated
The complaint comes less than a month after the two parties sought to reach an out-of-court settlement. If IRA Financial Trust wins the lawsuit, it says it will utilize the awarded damages to reimburse investors.
Gemini denied IRA’s assertions in an email to Bloomberg on Monday.
“We reject the allegations in the lawsuit. Our security standards are among the highest in the industry and we are constantly updating them to ensure our customers are always protected. In this matter as soon as IRA Financial notified us of their security incident we acted quickly to mitigate the loss of funds from their accounts.”