Crypto.com Hack
What happened
Crypto.com reported unauthorized withdrawals in January 2022 affecting 483 user accounts. Its later incident account put the value of the affected cryptocurrency and cash at about $34 million, including BTC and ETH. The exchange said it reimbursed affected customers.
The withdrawal authorization process permitted transfers without the expected two-factor-authentication approval. The precise bypass mechanism was not publicly established.
Case & protocol details
How it happened
- Crypto.com detected unauthorized withdrawals on January 17, 2022.
- It suspended withdrawals and investigated activity affecting 483 accounts.
- The exchange reset two-factor authentication and required users to enroll again.
- Crypto.com said affected customers were fully reimbursed.
Funds Recovery
Recovered
$34.4M
Net Loss
$0
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Post-mortem rekt.news
- report Crypto.com security report and next steps crypto.com
- report Crypto.com security report: operator statement excerpt cryptocraft.com
- analysis Website reference twitter.com
- analysis Bloomberg Law: Crypto.com says breached accounts held $34 million news.bloomberglaw.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
