- On May 8, $11.5 million was siphoned from the hot wallet of Taiwan’s BitoPro. The team has only now disclosed the incident.
- The modular blockchain Nervos Network suffered a $3 million attack.
On-chain investigator ZachXBT highlighted a suspicious outflow of digital assets worth $11.5 million from the hot wallets of Taiwan’s cryptocurrency exchange BitoPro, which occurred on May 8.
The incident affected coins in the Tron, Ethereum, Solana, and Polygon networks. According to the researcher, the thieves have already transferred the assets to the crypto mixer Tornado Cash, partially converting them into Bitcoin via Thorchain, and then sent them to a private Wasabi Wallet.
Representatives of the trading platform announced the fund leakage only on June 2 — 26 days after the attack. On May 9, the exchange announced “technical maintenance” and suspended withdrawals.
In a recent statement, BitoPro representatives confirmed the breach. According to the message, the hot wallet was attacked during the coin transfer process.
“At the time of the incident, an emergency response mechanism immediately activated, safely transferring the platform’s assets to a new wallet and blocking the hacker activity, as well as commissioning an external professional cybersecurity company to conduct a comprehensive investigation and tracking,” reads the translated statement from Chinese.
BitoPro representatives claim that the platform’s digital asset reserves are secured, and users’ rights and interests are unaffected. Detailed information about the attack and the reasons for the announcement delay remain undisclosed.
Modular Protocol Breach
On June 2, Cyvers Alerts analysts identified a series of suspicious transactions linked to the modular blockchain Nervos Network. The perpetrators managed to extract assets totaling ~$3 million, including:
- 257,800 USDT;
- 898,300 USDC;
- 60,300 DAI;
- 539.09 ETH;
- 0.79 WBTC.
The criminals exchanged all assets for Ethereum and then sent them to Tornado Cash.
The protocol team has suspended all smart contracts and initiated an investigation.
We’ve detected abnormal activity on #ForceBridge and have paused the service as a precaution. Our team is investigating.
Updates will be shared ASAP. Thank you for your patience.— Magickbase (@magickbase) June 2, 2025
Back in May, losses to the crypto industry from hacks reached $244 million. This figure was 40% lower than the previous month.