Hacked Exchanges since 2011

[bamb]

May 2019 Binance hack was initially devastating for me as I was holding huge amount of bitcoin on the exchange.  Now for the first time ever in Cryptocurrency,  Binance was able to refund everyone with the campaign,  Funds are 'Safu' I would have been part of the statistics,  but Binance safe the day!

[Raytheon]

Coinbase Multi-Factor Authentication Hack Affects at Least 6,000 Customers

A vulnerability that allowed hackers to bypass Coinbase’s multi-factor authentication SMS option has affected at least 6,000 of the exchange’s customers, according to a notification letter sent to affected customers that the company has filed with the California state attorney general offices.

https://www.coindesk.com/business/2021/10/01/coinbase-multi-factor-authentication-hack-affects-at-least-6000-customers/

[Jating]

Coinbase Multi-Factor Authentication Hack Affects at Least 6,000 Customers

A vulnerability that allowed hackers to bypass Coinbase’s multi-factor authentication SMS option has affected at least 6,000 of the exchange’s customers, according to a notification letter sent to affected customers that the company has filed with the California state attorney general offices.

https://www.coindesk.com/business/2021/10/01/coinbase-multi-factor-authentication-hack-affects-at-least-6000-customers/

The thing is that this hack happens months ago and it's just this month that Coinbase acknowledge it.

So we don't know why it took them so long to take responsibility, in any case Coinbase are going to reimburse those 6000 customers that have been affected by the hacks.

Coinbase also says it will reimburse those who lost funds as a result of the phishing attack, and that it has already begun to make customers whole. The company did not disclose the total amount the hackers stole.

https://decrypt.co/82427/coinbase-hack-phishing

[vapourminer]

Coinbase Multi-Factor Authentication Hack Affects at Least 6,000 Customers

A vulnerability that allowed hackers to bypass Coinbase’s multi-factor authentication SMS option has affected at least 6,000 of the exchange’s customers, according to a notification letter sent to affected customers that the company has filed with the California state attorney general offices.

https://www.coindesk.com/business/2021/10/01/coinbase-multi-factor-authentication-hack-affects-at-least-6000-customers/

yubikey. done.

[Raytheon]

Bitmart exchange hacked
"The latest centralized exchange hack may be among the most devastating to date as Bitmart has lost $196 million in various cryptocurrencies.

A tweet from security analysis firm Peckshield first called attention to the alleged hack Saturday night. One of Bitmart’s addresses currently shows steady outflows of entire token balances, some worth tens of millions of dollars, to an address currently labeled by Etherscan as the “Bitmart Hacker”"

Source: https://www.coindesk.com/business/2021/12/05/crypto-exchange-bitmart-hacked-with-losses-estimated-at-196-million/

[Raytheon]

 AscendEX loses $80M following ERC-20, BSC, Polygon hot wallet compromise

Crypto trading platform AscendEX suffered a loss of $77.7 million in a hot wallet compromise that allowed hackers to access and transfer tokens hosted over the Ethereum (ETH), Binance Smart Chain (BSC) and Polygon (POLY) blockchains.

https://cointelegraph.com/news/ascendex-loses-80m-following-erc-20-bsc-polygon-hot-wallet-compromise

[LeGaulois]

At least, someone will spend a wonderful Christmas, with full of gifts...  

Sometimes I wonder if they are telling the truth and if they really got hacked.

In reality, they can say that there was a security breach, but in fact, nothing happened at all and the users wouldn't notice since no proof was given, nor any audit published. It's just a matter of manipulating the databases.
Great business, you open a platform and attract users, and once the vaults are full, you can go on Twitter and say you were hacked.

Why would they offer to refund users in this case? Well, by the time you pay back the users you can earn profits with their money
I'm not saying that's what this exchange has done, but I'm sure there's at least one that has already done it


To @OP
The question should not be which exchanges have been hacked but which exchanges have never been hacked. =)

[FullNode]

Crypto Lending Service Celsius Pauses Withdrawals, Citing 'Extreme Market Conditions'

https://www.coindesk.com/policy/2022/06/13/crypto-lending-service-celsius-pauses-withdrawals-citing-extreme-market-conditions/

[FullNode]

Global regulators circle Sam Bankman-Fried’s FTX exchange Authorities in group’s home market and other jurisdictions take actions to protect client funds

https://www.ft.com/content/79b6f14c-110a-4c66-82e2-286003c34717

Crypto Lender BlockFi Halts Withdrawals, Citing Uncertainty Around FTX

https://www.investing.com/news/cryptocurrency-news/crypto-lender-blockfi-halts-withdrawals-citing-uncertainty-around-ftx-2942051

[JayJuanGee]

Global regulators circle Sam Bankman-Fried’s FTX exchange Authorities in group’s home market and other jurisdictions take actions to protect client funds

https://www.ft.com/content/79b6f14c-110a-4c66-82e2-286003c34717

Crypto Lender BlockFi Halts Withdrawals, Citing Uncertainty Around FTX

https://www.investing.com/news/cryptocurrency-news/crypto-lender-blockfi-halts-withdrawals-citing-uncertainty-around-ftx-2942051

Someone may well need to start another thread in regards to this topic and link to this thread, since OP does not seem to be active (has not logged in for more than a year and a half) and there are likely going to be a lot of new additions to the "hacked" and otherwise corrupted exchanges during this calendar year, and probably we are going to continue to witness quite a few more additional falling dominoes in the coming months.. likely even having ongoing fall out from the various ongoing catastrophes into 2023.

[Note3]

To @OP
The question should not be which exchanges have been hacked but which exchanges have never been hacked. =)

Here are 4 exchanges that have never been hacked:
Phemex
Bybit Crypto Exchange
PrimeXBT
Kraken Crypto Exchange
https://crypto.news/top-crypto-exchanges-that-have-never-been-hacked/

It's just a matter of time until we hear they get hack, so no exchange is safe

[gondel]

If you put the exact date of each hack on the daily graph it clearly shows how it impacts the price.

[AnonBitCoiner]

Crypto.com exchange following the path of FTX. They mistakenly sent 400 M to Gate Exchange.
There’s a theory it wasn’t an accident. From what I heard, Cryptodotcom sent the ETH to Gate dot io shortly before the latter did their on chain proof of reserves and then it was sent back. The theory suggests the two exchanges are in kahoots and are pooling funds to use for their audit. But yes of course, never ever hold your crypto on an exchange or anywhere you have to ask permission to move your funds.

[fillippone]

I don't know if this Thread is going to be updated again, but I am sorry to add The Rock Trading to the List.
They were hacked for 300 ETH in November, then things went South and now the oldest bitcoin Exchange around has suspended activity.

Reference thread:

WARNING the rock trading. (In Italian)
The Rock Trading Scam www.therocktrading.com Exchange Review fraud truffa

[mendace]

I don't know if this Thread is going to be updated again, but I am sorry to add The Rock Trading to the List.
They were hacked for 300 ETH in November, then things went South and now the oldest bitcoin Exchange around has suspended activity.

Reference thread:

WARNING the rock trading. (In Italian)
The Rock Trading Scam www.therocktrading.com Exchange Review fraud truffa

Wait, but talking about a violation now is not yet possible.  The Rock Trading has not released any leaked information about it so there is no certainty that this is really the case.  We don't know how things stand at the moment but there will soon be a meeting where members can participate and we'll see if there's any news about it.

[so98nn]

Just one of the list that’s very important to go through and see how we are not in safe hands when we trade over an exchange which is centralised. The problem is never with the owner, founder or the group of team that runs it but it is always hackers who would do anything for the money. You can never claim back anything from the hacked exchangers because you never own anything that’s on exchanger. Makes me realise not my keys not my coins for sure. Hope at least new comers go through this list and understand why this statement is very much important to us.

[fillippone]

I don't know if this Thread is going to be updated again, but I am sorry to add The Rock Trading to the List.
They were hacked for 300 ETH in November, then things went South and now the oldest bitcoin Exchange around has suspended activity.

Reference thread:

WARNING the rock trading. (In Italian)
The Rock Trading Scam www.therocktrading.com Exchange Review fraud truffa

Wait, but talking about a violation now is not yet possible.  The Rock Trading has not released any leaked information about it so there is no certainty that this is really the case.  We don't know how things stand at the moment but there will soon be a meeting where members can participate and we'll see if there's any news about it.

If I am not wrong they reported an hack of roughly 300 ETH back in November. They even pressed charges with the Italian Police about it.

Then as far as the current event are concerned, nothing is certain yet, but there is a certain chance of an hack. We will report about that when we know it.

[VB1001]

2021 > 5

Code:

Year Month Exchange		  	Amount/$		 Hacked	   Source:					

2021 Feb.  Cryptopia                     45,000                     BTC    coindesk.com/policy/2021/02/20/cryptopia-exchange-currently-in-liquidation-gets-hacked-again-report
2021 Apr.  Hotbit                     (attempt)                  denied    hedgewithcrypto.com/cryptocurrency-exchange-hacks/
2021 May   LCX                             6.8M              Hot wallet    cointelegraph.com/news/lcx-loses-6-8m-in-a-hot-wallet-compromise-over-ethereum-blockchain
2021 Aug.  Liquid                           97M                Phishing    hedgewithcrypto.com/cryptocurrency-exchange-hacks/
2021 Dec.  BitMart                         196M               (ETH/BSC)    crystalintelligence.com/investigations/the-10-biggest-crypto-hacks-in-history/

Hello everyone, after a long period of disconnection, we’re starting again. I’ll be uploading data on hacked exchanges once more. As always, we’ll follow the same line of work and continue reporting mainly on the best-known exchanges that have suffered any significant vulnerability.

Of course, if you know of any exchange that might be of interest and has been hacked in some way, feel free to post it — but always include the source of the news.

Thanks to everyone who posted during my absence. Now it’s time to review year by year from 2021 to the present. Give me a little time and I’ll upload everything updated.

[VB1001]

2022 >

Code:

2022 Jan.  Crypto.com                     33.7M                Accounts    halborn.com/blog/post/explained-the-crypto-com-hack-january-2022
2022 Jan.  LCX                               8M                  Hacked    lcx.com/lcx-hack-update/
2022 Oct.  Binance (BSC)                   570M             Smart Chain    binance.com/en/square/post/18912527332874
2022 Nov.  FTX                             477M                  Hacked    theblock.co/post/196941/the-biggest-crypto-hacks-of-2022
2022 Nov.  Deribit                          28M              Hot wallet    binance.com/it/square/post/24475

2023 >

Code:

2023 Apr.  GDAC                             13M              Hot wallet    decrypt.co/125834/hackers-rob-south-korean-exchange-13m-bitcoin-ethereum-other-assets
2023 Jun.  Atomic Wallet                   100M             5,500 users    ccn.com/education/crypto-hacks-2023-full-list-of-scams-and-exploits-as-millions-go-missing/
2023 Sep.  CoinEx                           70M             Private key    ccn.com/education/crypto-hacks-2023-full-list-of-scams-and-exploits-as-millions-go-missing/
2023 Nov.  Poloniex                        120M              Hot wallet    theblock.co/post/268831/the-10-largest-crypto-hacks-and-exploits-of-2023
2023 Nov.  HTX (Huobi)                      30M              Hot wallet    investing.com/news/cryptocurrency-news/htx-suffers-30-million-theft-vows-to-enhance-security-93CH-3242829

2024

Code:

2024 May.  DMM Bitcoin                     305M        4,502 BTC (keys)    investopedia.com/news/largest-cryptocurrency-hacks-so-far-year/
2024 Jun.  BtcTurk                          55M              Hot wallet    ccn.com/news/crypto/top-5-crypto-hacks-shook-industry-2024/
2024 Jul.  WazirX                          235M                Multisig    ccn.com/news/crypto/top-5-crypto-hacks-shook-industry-2024/
2024 Sep.  BingX                            43M              Hot wallet    theblock.co/post/331626/crypto-hacks-exploits-2024
2024 Sep.  Indodax                          22M              Hot wallet    thedefiant.io/news/cefi/indonesian-crypto-exchange-indodax-hacked-over-22-million-goes-offline

2025

Code:

2025 Feb.  Bybit                          1.46B                400k ETH    ccn.com/education/crypto/crypto-hacks-exploits-full-list-scams-vulnerabilities/
2025 May   Coinbase                        400M             Data Breach    theguardian.com/us-news/2025/may/15/coinbase-cyber-attack-crytocurrency
2025 Jun.  Nobitex                          90M                    Hack    coindesk.com/business/2025/06/18/why-pro-israel-group-s-usd90m-crypto-hack-could-be-a-hammer-blow-for-iran-s-regime
2025 Jul.  BigONE                           27M                    Hack    coindesk.com/markets/2025/07/16/crypto-exchange-bigone-confirms-27m-hack-vows-full-user-compensation
2025 Jul.  CoinDCX                          44M                   Theft    theblock.co/post/364993/coindcx-employee-arrested-police-crypto-theft

Updated list


China Accuses US of Orchestrating $13 Billion Bitcoin Hack

(Bloomberg) -- China’s cybersecurity agency accused the American government of orchestrating the theft of about $13 billion worth of Bitcoin, representing China’s most recent attempt to attribute major cyberattacks to the US.

https://finance.yahoo.com/news/china-accuses-us-orchestrating-13-091544949.html