Shapeshift Hack

REPORTED LOSS $269K
Low Access Control

What happened

Digital currency exchange ShapeShift lost as much as $230,000 in three separate thefts over the course of a month.

According to the report, the first incident took place on 14th March, the company said, resulting in the loss of 315 BTC. It was soon established that a ShapeShift employee was behind the incident.

The employee was fired the next day. Work was then begun on moving the service onto safer hardware.

Yet according to ShapeShift’s report, the thefts continued. On 7th April, 97 BTC, 3,600 ETH, and 1,900 LTC in funds were stolen. Within two days of that theft, after the site was taken offline and steps were taken to beef up security, an additional 57 BTC and 2,200 ETH were taken.

Case & protocol details

Classification CeFi
Protocol Type DEX
Official Website shapeshift.com/
Protocol Twitter/X @ShapeShift_io

Evidence & learning

Sources and on-chain records

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.