{"id":25573,"date":"2025-07-25T10:18:55","date_gmt":"2025-07-25T07:18:55","guid":{"rendered":"https:\/\/forklog.com\/en\/hackers-breach-woo-x-cryptocurrency-exchange-for-14-million\/"},"modified":"2025-07-25T10:18:55","modified_gmt":"2025-07-25T07:18:55","slug":"hackers-breach-woo-x-cryptocurrency-exchange-for-14-million","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/hackers-breach-woo-x-cryptocurrency-exchange-for-14-million\/","title":{"rendered":"Hackers Breach WOO X Cryptocurrency Exchange for $14 Million"},"content":{"rendered":"<p>On July 24, the cryptocurrency exchange WOO X suspended withdrawals following a breach in which attackers stole $14 million. The incident affected nine user accounts.<\/p>\n<p><!--more--><\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">We&#8217;re currently investigating a contained incident that occurred on WOO X earlier today<\/p>\n<p>While user funds and trading are unaffected, withdrawals have been temporarily paused while we complete the investigation.<\/p>\n<p>Stay tuned to this account for updates: <a href=\"https:\/\/t.co\/qWc9cDhn2z\">https:\/\/t.co\/qWc9cDhn2z<\/a><\/p>\n<p>\u2014 WOO X (@_WOO_X) <a href=\"https:\/\/twitter.com\/_WOO_X\/status\/1948400223761342920?ref_src=twsrc%5Etfw\">July 24, 2025<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cWe have already contacted the affected users and guarantee full reimbursement of all unauthorized withdrawals,\u201d representatives of the platform stated.<\/p>\n<\/blockquote>\n<p>An internal investigation revealed that a WOO X employee fell victim to phishing. Cybercriminals gained access to his computer and the exchange&#8217;s system. Part of the security measures worked, but the hackers \u201cmanaged to coordinate a series of withdrawals from user accounts.\u201d<\/p>\n<p>According to Cyvers Alerts, the attackers initially transferred $1 million in USDT from WOO&#8217;s hot wallet to an address on the Ethereum network. All funds were then exchanged for ETH. Later, another $7.3 million was sent to a different address. Meanwhile, on the <a href=\"https:\/\/forklog.com\/en\/news\/bnb-surpasses-800-overtakes-solana-in-market-capitalization\">BNB<\/a> blockchain, 5 BTCB were withdrawn from the exchange, exchanged for BNB, and moved to a new wallet.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">\ud83d\udea8ALERT\ud83d\udea8Our system has detected multiple suspicious transactions with an estimated loss of more than $12M involving <a href=\"https:\/\/twitter.com\/_WOO_X?ref_src=twsrc%5Etfw\">@_WOO_X<\/a> among <a href=\"https:\/\/twitter.com\/search?q=%24BTC&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$BTC<\/a>, <a href=\"https:\/\/twitter.com\/search?q=%24ETH&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$ETH<\/a>, <a href=\"https:\/\/twitter.com\/search?q=%24BNB&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$BNB<\/a>, and <a href=\"https:\/\/twitter.com\/search?q=%24ARB&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$ARB<\/a> networks.<br \/>Suspicious address on <a href=\"https:\/\/twitter.com\/search?q=%24ETH&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$ETH<\/a> received $1M <a href=\"https:\/\/twitter.com\/search?q=%24USDT&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$USDT<\/a> from WOO\u2019s hot wallet, with additional <a href=\"https:\/\/twitter.com\/search?q=%24ETH&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$ETH<\/a>. <br \/>The full $1M in\u2026 <a href=\"https:\/\/t.co\/XSvuwCOsZ7\">pic.twitter.com\/XSvuwCOsZ7<\/a><\/p>\n<p>\u2014 \ud83d\udea8 Cyvers Alerts \ud83d\udea8 (@CyversAlerts) <a href=\"https:\/\/twitter.com\/CyversAlerts\/status\/1948414103178924286?ref_src=twsrc%5Etfw\">July 24, 2025<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>WOO X is collaborating with external security experts and other exchanges to trace and freeze the stolen funds.<\/p>\n<p>Following the incident, trading volume on the exchange surged by 145% to $25.8 million.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"230\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/image1-642-1024x230.png\" alt=\"image1\" class=\"wp-image-262632\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/image1-642-1024x230.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/image1-642-300x67.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/image1-642-768x173.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/image1-642-1536x345.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/image1-642.png 1999w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Source: <a href=\"https:\/\/www.coingecko.com\/ru\/%D0%BE%D0%B1%D0%BC%D0%B5%D0%BD\/woo-network\">CoinGecko<\/a>.<\/figcaption><\/figure>\n<p>Earlier, on July 16, unknown attackers <a href=\"https:\/\/forklog.com\/en\/news\/bigone-exchange-hacked-for-27-million\">breached<\/a> the BigONE trading platform for $27 million. Two days later, the Bitcoin exchange CoinDCX was attacked, resulting in a <a href=\"https:\/\/forklog.com\/en\/news\/coindcx-exchange-suffers-44-million-hack\">loss of $44 million<\/a>. <\/p>\n<p>According to a report by <a href=\"https:\/\/forklog.com\/en\/news\/a-grim-half-year-scams-and-hacks-cost-the-industry-3-1-billion\">Hacken<\/a>, losses from hacks and fraud in Web3 projects amounted to $3.1 billion in the first six months of 2025. This figure has already surpassed the total for 2024, which was $2.85 billion.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On July 24, the cryptocurrency exchange WOO X suspended withdrawals following a breach in which attackers stole $14 million. The incident affected nine user accounts.<\/p>\n","protected":false},"author":1,"featured_media":25572,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"","news_style_id":"","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1166,44],"class_list":["post-25573","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-centralized-exchanges-cex","tag-cybercrime"],"aioseo_notices":[],"amp_enabled":true,"views":"82","promo_type":"","layout_type":"","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/25573","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=25573"}],"version-history":[{"count":0,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/25573\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/25572"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=25573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=25573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=25573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}