Cashaa Hack

REPORTED LOSS $3.1M
Medium Custodial wallet compromise bitcoin

What happened

CertiK reports that approximately 337 BTC was stolen from Cashaa-owned Bitcoin wallets in July 2020, valued at about $3.1 million when its analysis was published.

Technical Root Cause

Custodial wallet information was compromised. The exact initial-access method was undisclosed; malware and internal operating errors remained hypotheses.

Case & protocol details

Classification CeFi / Frontend & Infrastructure
Protocol Type Exploit/Access control
Official Website cashaa.com/
Protocol Twitter/X @yourCashaa

How it happened

  1. Cashaa attributed the theft to access to a victim's computer and Blockchain.info wallet information, according to CertiK.
  2. CertiK identified a 1.0597708 BTC transfer on July 10 and 335.91312085 BTC from eight wallets on July 11, sent to the same recipient.
  3. The analysis did not establish how access to the computer was obtained.

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.