LCX Hack
REPORTED LOSS
$7.9M
What happened
On January 8, 2022, approximately $7.94 million in ETH and tokens was stolen from one LCX Ethereum hot wallet. LCX said its other wallets and customer personal data were unaffected. It paused deposits and withdrawals and committed its own funds to covering affected balances.
Technical Root Cause
Unauthorized access to a single hot wallet enabled the transfers. LCX did not publicly describe the initial access method in its incident report, so a specific private-key theft or software vulnerability is unconfirmed.
Case & protocol details
Classification
CeFi / Access Control
Protocol Type
Exploit/Access control
Official Website
www.lcx.com/
Protocol Twitter/X
@lcx
How it happened
- Unauthorized transfers drained the affected wallet between 23:23 and 23:37 CET.
- LCX paused deposits and withdrawals and contacted partners and authorities.
- Monerium disabled movement of approximately 611,000 EURe. Freezing these tokens did not by itself establish their return.
- LCX migrated assets to new infrastructure and reported that deposit and withdrawal services were fully restored on January 28.
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report lcx.com
- report Post-mortem rekt.news
- report Hot Wallet Incident Report lcx.com
- analysis Website reference twitter.com
- analysis Website reference twitter.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
