BitKeep Hack

Reported loss $8.0M
Phishing

What happened

In December 2022, attackers distributed counterfeit BitKeep Android applications through phishing sites. Malicious code in the altered APKs stole users' private keys and was used to take more than $8 million from affected wallet users; official Google Play versions were reported unaffected.

How it happened

  1. Attackers hijacked downloads of unofficial BitKeep Android APKs from phishing sites.
  2. They inserted malicious code into the altered applications.
  3. The code stole users' private keys.
  4. The attacker used those keys to move funds from affected wallet accounts.

Protocol details

Classification Other
Protocol Type Exploit/Phishing
Protocol links Website @BitKeepOS

Evidence

Understand the attack patterns

Compare incidents →
Phishing Attacks

Same attack technique

Browse all hacks →
Azuki $750K lost GMX Phishing $4.0M lost Gemini Loss not disclosed Tableland $46K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes