BitoPro Hack

TOTAL LOST $2.2M
Medium Other

What happened

An unknown user of the Taiwanese exchange BitoPro falsified a deposit in the XRP cryptocurrency and withdrew 7 million coins ($2.17 million) from the exchange. The mechanism of this exploit was described in detail by the Bitrue exchange:

https://twitter.com/BitrueOfficial/status/1123992201015509002

The attacker claimed to have sent 330,000 XRP, but actually transferred only 0.003255 XRP marked as a partial payment "tfPartialPayment".

According to XRPScan, the attacker sent a lot of payments to the BitoPro wallet address, the value of which did not exceed 0.003255 XRP on average. Also, the registry displays two transactions of 3 million XRP, which were successfully credited to the account by the exchange:

https://xrpscan.com/account/rERfHy4YmDbKxsuFmzPBhMQCGyFrAGvbra

Case & protocol details

Classification CeFi
Protocol Type Exploit/Other
Official Website www.bitopro.com/
Protocol Twitter/X @BitoEX_Official

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Aquifer $2.5M
Term Labs $8.5M
Harmony $300K
Coreum $200K

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes