What happened
On February 8, 2022, cryptocurrency held for IRA Financial Trust customers was stolen from accounts serviced through Gemini, with public estimates near $36 million. IRA Financial sued Gemini and alleged failures in institutional-account security; those allegations were disputed, and the technical cause remains unresolved.
Technical root cause
The incident involved custody and account-control boundaries rather than a confirmed smart-contract exploit. The reviewed sources contain disputed allegations about security failures and do not establish the initial access method.
How it happened
- An attacker moved Bitcoin and Ether from customer-linked retirement accounts.
- IRA Financial said it detected the theft and sought to freeze accounts and transfers.
- The company’s lawsuit alleged that Gemini’s institutional controls and response were inadequate.
- Public reporting did not establish whether the entry point was an IRA administrative account, API credential, insider action or another compromise.
Protocol details
Classification
Other / Frontend & Infrastructure
Protocol Type
Exploit/Other
Protocol links
Website
@TheIRAFinancial
Evidence
- report @TheIRAFinancial incident report twitter.com
- report IRA Financial hack reporting decrypt.co
- report Report bloomberg.com
- analysis DeFiLlama defillama.com
- analysis IRA Financial Trust lawsuit announcement prnewswire.com
- analysis Regulatory filing discussing IRA-Gemini security dispute newsfile.futunn.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
