A major security lapse has rocked Taiwan-based crypto exchange BitoPro, which quietly suffered an $11.5 million hack earlier in May but failed to alert users for weeks.
On May 8, attackers drained funds from the platform’s hot wallets across Ethereum, Solana, Tron, and Polygon. Blockchain investigator ZachXBT flagged the breach publicly on June 2, noting that the stolen assets were funneled through decentralized exchanges, mixers like Tornado Cash, and even bridged to Bitcoin—tactics commonly used to cover tracks.
BitoPro had issued a vague “maintenance” notice the day after the hack, but did not confirm the theft until three weeks later. In a Telegram message, the exchange attributed the exploit to an old wallet that was compromised during a system upgrade. It claimed all user funds were safe and that operations remained fully functional.
A third-party cybersecurity firm is now helping track the stolen funds, and BitoPro has promised to share new wallet details to support transparency.
Meanwhile, the incident adds to a growing list of crypto breaches. In late May, the Cetus DEX was hit for $220 million, and Nervos Network lost $3 million just days ago. In both cases, stolen assets were laundered using Tornado Cash.
Security experts say access control failures remain one of the most pressing risks in Web3—and the pace of high-profile hacks shows no signs of slowing down.
Indian crypto exchange CoinDCX has confirmed a $44 million security breach involving one of its internal liquidity accounts.
The United Kingdom’s Home Office is preparing to liquidate a massive cache of seized cryptocurrency—at least $7 billion worth of Bitcoin—according to a new report by The Telegraph.
A former National Crime Agency (NCA) officer has been sentenced to five years and six months in prison after stealing 50 BTC—now worth over £4.4 million—from a criminal investigation he was helping to lead.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.