What happened
On August 14, 2025, BtcTurk said it detected unusual movements in hot wallets and temporarily halted crypto deposits and withdrawals. Public reports estimated losses around $30 million to $48 million, but the exchange’s public statement did not publish a final reconciled amount or root cause.
Technical root cause
The confirmed failure was unauthorized activity in hot-wallet custody. The reviewed public statement and reporting do not establish the initial access mechanism.
How it happened
- BtcTurk detected suspicious transfers from hot wallets during routine checks.
- The exchange paused crypto wallet operations while leaving trading and Turkish-lira services available.
- Investigators and the exchange monitored addresses and coordinated containment.
- Public reporting did not establish whether keys, credentials, infrastructure or an insider enabled the transfers.
Protocol details
Evidence
- report @CyversAlerts incident report x.com
- report @peckshield incident report x.com
- report @CertiKAlert incident report x.com
- analysis Website reference cointelegraph.com
- analysis DeFiLlama defillama.com
- analysis BtcTurk says all security measures taken after hot-wallet claims aa.com.tr
- analysis BtcTurk statement on August 14 claims aa.com.tr
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
