WOO X Hack

On July 24, 2025, crypto trading platform WOO X experienced a cybersecurity breach affecting 9 user accounts, resulting in approximately $14 million in unauthorized withdrawals. The incident was contained within hours, and WOO X committed to fully covering all losses while temporarily pausing withdrawal services for additional security measures.

The exploit originated from a targeted phishing attack that compromised a team member's device, allowing the attacker to gain access to WOO X's development environment. Despite multiple security measures limiting access, the exploiter had sufficient time to coordinate a series of unauthorized withdrawals from the affected user accounts. The attack began at 13:50 UTC+8 with the first withdrawal request, with subsequent requests coming in gradually until the exploit was discovered and halted at 15:40 UTC+8.

The incident was quickly contained, with many withdrawal attempts blocked by the platform's security systems. WOO X completed a full forensic review and restored all affected account balances from their company treasury within 24-48 hours, confirming that no WOO tokens were stolen or sold during the compensation process.

Ethereum Addresses:

0x889b49ef…20004b

0x77167f0b…acd518

Bitcoin Addresses:

bc1q4xm6y972qa82f4cudr4d28xdhxa4e68v5atrej

bc1qut0g2uflywfcycuftuek7944p6hhxgm2p92fzm