AlphaPo Hack

ALPHAPO-ONLY LOSS UNCONFIRMED —
Hot-wallet compromise; initial access unknown ethereum tron

What happened

Alphapo’s hot-wallet incident was reported in July 2023 with an initial estimate of $23 million. Later reporting raised the estimate to $60 million after additional Bitcoin and Tron transfers were identified, and noted that this broader total included associated CoinsPaid losses. The figure therefore needs scope qualification rather than being treated as an exact Alphapo-only loss.

Technical Root Cause

The reporting establishes a hot-wallet compromise, but does not identify the exact initial access mechanism.

Case & protocol details

Classification Wallet Security

How it happened

  1. Assets left Alphapo-associated hot wallets.
  2. Stolen Ethereum assets were converted into ETH and moved through other networks.
  3. Further tracing identified additional transfers and expanded the reported loss estimate.
  4. Payment customers including HypeDrop suspended withdrawals while the incident was investigated.

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Bitrue $23.0M
LCX $7.9M
Bilaxy $21.7M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes