Remitano Hack

REPORTED LOSS $2.7M
Medium Private Key Compromised (Unknown Method) bitcoincash ethereum tron

What happened

Remitano suffered approximately $2.7 million in unauthorized hot-wallet outflows in September 2023. The exchange attributed the incident to a third-party data breach. Tether froze stolen USDT, so the gross outflow should not be read as the final unrecovered loss.

Technical Root Cause

Hot-wallet authorization was compromised; the exact third-party breach mechanism was not disclosed.

Case & protocol details

Classification Infrastructure / Frontend & Infrastructure

How it happened

  1. Unauthorized transfers moved assets from exchange hot wallets.
  2. Remitano moved remaining hot-wallet assets to cold storage and coordinated with Tether.
  3. USDT was frozen on Ethereum and Tron; other Ethereum assets were exchanged and moved onward. Freezing tokens did not itself establish that customers had been repaid.

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

BNS $7.5M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes