Back to Site

🏦 Cryptocurrency Exchange Incidents

Analysis of the latest 10 major incidents in cryptocurrency exchanges

FTX - Largest Cryptocurrency Exchange Collapse

November 2022
$8,000,000,000

FTX, one of the largest cryptocurrency exchanges, went bankrupt due to massive fraud and improper management of client funds. Founder Sam Bankman-Fried used client funds for risky investments through the related company Alameda Research, leading to losses of over 8 billion dollars. Problems included the lack of separation between client funds and the exchange's own funds, opaque management structure, and the use of FTT tokens as collateral for obtaining loans. When the price of FTT fell, it triggered a cascade effect leading to bankruptcy. The incident shook the entire cryptocurrency market and led to stricter regulation in the industry. Many users lost all their funds, and trust in centralized exchanges was seriously undermined. This case demonstrated the critical importance of transparency and proper fund management in the cryptocurrency industry.

Incident Type
Fraud
Severity
Critical
Country
Bahamas

Binance - Hot Wallet Hack

October 2022
$570,000,000

Binance, the largest cryptocurrency exchange, was attacked, resulting in the theft of 570 million dollars. The attackers gained access to the exchange's hot wallets through compromise of private keys. The attack was possible due to insufficient infrastructure security and lack of proper protection of private keys. The attackers were able to bypass the multi-level security system and gain access to client funds. After discovering the attack, Binance suspended operations and began an investigation. Fortunately, the exchange had an insurance fund that covered the losses, and clients were not affected. However, the incident demonstrated the vulnerability of even the largest market players and the importance of continuously improving security systems. After the attack, Binance strengthened security measures and increased the share of funds in cold wallets.

Incident Type
Hack
Severity
Critical
Country
Cayman Islands

Coinbase - User Data Breach

March 2023
$1,000,000

Coinbase, one of the largest cryptocurrency exchanges, fell victim to a user data breach, compromising the personal information of millions of clients. The attackers gained access to the exchange's database through a vulnerability in the data management system. The breach included names, email addresses, phone numbers, and partially encrypted passwords of users. Although client funds were not stolen, the data breach created serious security risks for users, including the possibility of phishing attacks and identity theft. After the incident, Coinbase strengthened security measures, implemented additional data encryption, and improved the security monitoring system. This case demonstrated the importance of protecting personal data in the cryptocurrency industry and the need to comply with security standards.

Incident Type
Data Breach
Severity
High
Country
USA

KuCoin - Hot Wallet Hack

September 2020
$281,000,000

KuCoin, a popular cryptocurrency exchange, was attacked, resulting in the theft of 281 million dollars. The attackers gained access to the exchange's hot wallets through compromise of private keys. The attack was particularly devastating because KuCoin did not have sufficient insurance fund to cover losses. After discovering the attack, the exchange suspended operations and began the recovery process. KuCoin issued KCS tokens to cover losses, but many users lost their funds. The incident demonstrated the importance of having insurance funds and proper risk management in the cryptocurrency industry. After the attack, KuCoin strengthened security measures and increased the share of funds in cold wallets.

Incident Type
Hack
Severity
Critical
Country
Seychelles

Crypto.com - Unauthorized Transactions

January 2022
$35,000,000

Crypto.com, a popular cryptocurrency platform, was attacked, resulting in the theft of 35 million dollars. The attackers gained access to user accounts through a vulnerability in the authentication system and performed unauthorized transactions. The attack was possible due to shortcomings in the security system and lack of proper protection against unauthorized access. The attackers were able to bypass two-factor authentication and gain access to user funds. After discovering the attack, Crypto.com suspended operations and began an investigation. The platform covered losses from its own funds, but the incident undermined user trust. After the attack, Crypto.com strengthened security measures and improved the system for monitoring suspicious activity.

Incident Type
Unauthorized Access
Severity
Critical
Country
Singapore

Bitfinex - Hot Wallet Hack

August 2016
$72,000,000

Bitfinex, one of the oldest cryptocurrency exchanges, was attacked, resulting in the theft of 72 million dollars in bitcoins. The attackers gained access to the exchange's hot wallets through compromise of the key management system. The attack was particularly devastating because Bitfinex did not have an insurance fund to cover losses. After discovering the attack, the exchange suspended operations and began the recovery process. Bitfinex issued BFX tokens to cover losses, but many users lost their funds. The incident demonstrated the importance of proper key management and having insurance funds in the cryptocurrency industry. After the attack, Bitfinex strengthened security measures and switched to a more secure key management system.

Incident Type
Hack
Severity
Critical
Country
Hong Kong

Mt. Gox - Largest Collapse in History

February 2014
$460,000,000

Mt. Gox, once the largest bitcoin exchange, went bankrupt after it was discovered that 850,000 bitcoins (about 460 million dollars at the time) had been stolen as a result of a series of attacks. The attackers exploited a vulnerability in the transaction system known as "transaction malleability," which allowed them to create duplicate transactions and deceive the exchange's accounting system. Problems included insufficient infrastructure security, lack of proper auditing, and opaque fund management. After discovering the theft, Mt. Gox suspended operations and filed for bankruptcy. Many users lost all their funds, and trust in cryptocurrency exchanges was seriously undermined. This incident became a turning point in cryptocurrency history and led to stricter security measures in the industry.

Incident Type
Hack
Severity
Critical
Country
Japan

Coincheck - Hot Wallet Hack

January 2018
$534,000,000

Coincheck, a Japanese cryptocurrency exchange, was attacked, resulting in the theft of 534 million dollars in NEM tokens. The attackers gained access to the exchange's hot wallets through compromise of private keys. The attack was possible due to insufficient infrastructure security and lack of proper protection of private keys. Coincheck stored all funds in hot wallets, making them vulnerable to attacks. After discovering the attack, the exchange suspended operations and began an investigation. Fortunately, Coincheck was able to cover losses from its own funds, and clients were not affected. However, the incident led to stricter regulation in Japan and strengthened security measures in the cryptocurrency industry.

Incident Type
Hack
Severity
Critical
Country
Japan

Bithumb - Hot Wallet Hack

June 2018
$31,000,000

Bithumb, a South Korean cryptocurrency exchange, was attacked, resulting in the theft of 31 million dollars. The attackers gained access to the exchange's hot wallets through compromise of private keys. The attack was possible due to insufficient infrastructure security and lack of proper protection of private keys. The attackers were able to bypass the multi-level security system and gain access to client funds. After discovering the attack, Bithumb suspended operations and began an investigation. The exchange covered losses from its own funds, but the incident undermined user trust. After the attack, Bithumb strengthened security measures and increased the share of funds in cold wallets.

Incident Type
Hack
Severity
Critical
Country
South Korea

Upbit - Hot Wallet Hack

November 2019
$49,000,000

Upbit, a South Korean cryptocurrency exchange, was attacked, resulting in the theft of 49 million dollars in Ethereum. The attackers gained access to the exchange's hot wallets through compromise of private keys. The attack was possible due to insufficient infrastructure security and lack of proper protection of private keys. The attackers were able to bypass the multi-level security system and gain access to client funds. After discovering the attack, Upbit suspended operations and began an investigation. The exchange covered losses from its own funds, but the incident undermined user trust. After the attack, Upbit strengthened security measures and increased the share of funds in cold wallets. This incident demonstrated the importance of proper key management and having insurance funds in the cryptocurrency industry.

Incident Type
Hack
Severity
Critical
Country
South Korea