AlphaPo Hack
Alphapo-only loss unconfirmed
Not disclosed
Hot-wallet compromise; initial access unknown
What happened
Alphapo’s hot-wallet incident was reported in July 2023 with an initial estimate of $23 million. Later reporting raised the estimate to $60 million after additional Bitcoin and Tron transfers were identified, and noted that this broader total included associated CoinsPaid losses. The figure therefore needs scope qualification rather than being treated as an exact Alphapo-only loss.
Technical root cause
The reporting establishes a hot-wallet compromise, but does not identify the exact initial access mechanism.
How it happened
- Assets left Alphapo-associated hot wallets.
- Stolen Ethereum assets were converted into ETH and moved through other networks.
- Further tracing identified additional transfers and expanded the reported loss estimate.
- Payment customers including HypeDrop suspended withdrawals while the incident was investigated.
Protocol details
Evidence
- report Post-mortem rekt.news
- report @zachxbt incident report twitter.com
- report @PeckShieldAlert incident report twitter.com
- report AlphaPo - REKT rekt.news
- analysis Web Archive archive.ph
- analysis DeFiLlama defillama.com
- analysis Alphapo hot wallets drained for $23 million, HypeDrop disables withdrawals theblock.co
- analysis Alphapo’s hack now estimated at $60 million: ZachXBT theblock.co
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
