WOO X, a popular cryptocurrency trading platform, has been hit by a serious security breach.
The exploit led to over $12 million in unauthorized withdrawals across four major blockchain networks—Bitcoin, Ethereum, Binance Smart Chain, and Arbitrum.
Blockchain security firm Cyvers Alerts first flagged the activity, reporting multiple suspicious transfers originating from WOO X wallets. The most significant event occurred on Ethereum, where $1 million in USDT and additional ETH were drained from a WOO hot wallet.
The stolen USDT was quickly converted into ETH, then routed to a separate wallet—totaling around $7.3 million. On the Binance chain, attackers moved 5 BTCB into BNB and sent the funds to another new address.
Cyvers estimated total losses across all chains to be over $12 million.
In an official response, WOO X acknowledged the breach and confirmed that nine user accounts were directly affected. The company said it has already contacted those users and promised full reimbursement for any unauthorized losses.
Withdrawals on the platform have been temporarily suspended to prevent further damage. “We are investigating the incident and will resume transactions after completing a full security review,” the statement read.
The WOO X team is working closely with security experts to identify the source of the breach. So far, the attack appears isolated, and the platform emphasized that only a small number of accounts were compromised.
More updates are expected once the internal review is complete and withdrawals are safely re-enabled. For now, users are advised to monitor official announcements and stay cautious.
The first half of 2025 has already become the most damaging period in Web3 security history, according to Hacken’s newly released Half-Year Security Report.
The U.S. Department of Justice has officially ended its investigation into Kraken co-founder Jesse Powell, according to a Fortune report.
Indian crypto exchange CoinDCX has confirmed a $44 million security breach involving one of its internal liquidity accounts.
The United Kingdom’s Home Office is preparing to liquidate a massive cache of seized cryptocurrency—at least $7 billion worth of Bitcoin—according to a new report by The Telegraph.