Bitmit Hack

REPORTED LOSS $202K
Low Access Control

What happened

The auction site Bitmit had 15 BTC stolen, after the server was accessed by an employee of their hosting company without authorization.

Bitmit, known as the 'eBay of bitcoin', has had a string of setbacks since its inception. After the theft the site has remained online, albeit with the header "Bitmit is going to be sold. Please complete your orders and withdraw your funds asap!"

"We are planning to let another company take over Bitmit. Meanwhile we deactivated the site to let you withdraw your funds & complete your orders. The chances are good that Bitmit will be continued." - Bitmit stated.

Case & protocol details

Classification CeFi
Protocol Type Exploit/Access control
Official Website www.bitmit.net/

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

AFX $24.1M
B² Network $3.8M
Third-party SquidRouterModule $3.2M
StablR $12.8M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes