NoOnes Hack

Starting on 1 January 2025, hot wallets belonging to NoOnes, a peer-to-peer crypto marketplace, were drained on Ethereum, TRON, Solana and BNB Smart Chain. Over about two days the attacker made hundreds of withdrawals, each under about $7,000, taking roughly $7.9 million in total according to ZachXBT. NoOnes put it at about $8 million. The stolen funds were bridged to Ethereum and BNB Smart Chain, consolidated and deposited into Tornado Cash. Merkle Science found that the Ethereum leg was funded from Tornado Cash, and that later legs were funded with proceeds from the Ethereum breach.

NoOnes said nothing publicly until ZachXBT posted his investigation. On 24 January 2025, CEO Ray Youssef confirmed the losses and blamed an exploit of the company's Solana bridge. He said the loss mostly came from the hot wallets' operating float, and that user funds and data were safe. NoOnes took the Solana bridge offline and suspended SOL deposits until it had been fully penetration-tested. It has not published technical details of the bridge vulnerability.