Chinese authorities have revealed that four former employees of the prominent cryptocurrency exchange Huobi were involved in a major theft of crypto assets.
The employees in question – Zhang, Dong, Liu, and Zhang Yi – used Trojan horse viruses to infiltrate wallets, resulting in the theft of over 40,000 user reminder codes and private keys. The exact amount of stolen cryptocurrency has not been specified.
This theft took place prior to Justin Sun’s acquisition of Huobi, which was formerly the largest cryptocurrency exchange in China.
According to Ping An Xuhui’s official WeChat account, the employees inserted a backdoor into the virtual currency wallet software in early March 2023 to access user private keys. After recording the stolen keys and associated wallet addresses, they destroyed the server and database. They intended to use these private keys in two years to unlawfully access users’ digital currencies.
Three of the suspects managed to alter over 19,000 digital wallet addresses by unlawfully obtaining more than 27,000 reminder codes and over 10,000 private keys. In April 2024, the Xuhui District People’s Court sentenced Liu, Zhang A, and Dong to three years in prison each, along with a 30,000 yuan fine for their role in illegally acquiring computer system data.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.
The first half of 2025 has become the most damaging six-month period in crypto history, with over $2.1 billion stolen across 75+ separate incidents, according to new data.