What happened
Mixin Network reported that an attack on its cloud service provider's database on September 23, 2023, Hong Kong time, caused losses involving approximately $200 million in mainnet assets. The company temporarily suspended deposits and withdrawals and sought investigation assistance from Google and SlowMist.
The disclosed failure involved the database of a third-party cloud service provider. The reviewed accounts do not establish the initial access method, the database vulnerability, or how the compromise enabled control of the affected assets. They therefore do not prove a specific private-key extraction mechanism or a flaw in Mixin's consensus or smart-contract code.
How it happened
- According to Mixin's announcement, attackers targeted its cloud service provider's database on September 23, 2023, Hong Kong time.
- Mixin reported a resulting loss of mainnet assets involving approximately $200 million, without publicly establishing the exact path from database access to asset theft in the reviewed sources.
- Elliptic identified ETH, BTC and USDT among the stolen funds and observed stolen USDT being exchanged for DAI through Uniswap.
- Mixin temporarily suspended deposits and withdrawals while the incident was investigated.
Protocol details
Evidence
- report Mixin Network announcement on the September 23 cloud-provider database attack twitter.com
- report @DeDotFiSecurity incident report twitter.com
- report 2023 Blockchain Security and Anti-Money Laundering Annual Report slowmist.com
- analysis Web Archive archive.ph
- analysis DeFiLlama defillama.com
- analysis Hackers steal $200M from crypto company Mixin techcrunch.com
- analysis Mixin Network hacked for $200 Million elliptic.co
- analysis Mixin Network Database Compromise, September 2023 conisec.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
