Back to dashboard
Monday, March 9, 2026 at 16:40 UTC

Tronix Exchange

Insider exfiltration of multisig signer keys.

Partial
Funds stolen
$88.00M
Recovered
$22.00M25%
Still outstanding
$66.00M
Chain
Tron
Category
CEX
Attack vector
Private Key Compromise
Reported by
SlowMist
Incident ID
e8

Exploit & recovery timeline

  1. Mar 9, 2026 · 14:40 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against Tronix Exchange.

  2. Mar 9, 2026 · 16:40 UTC
    Exploit executed

    $88.0M drained from Tronix Exchange on Tron via Private Key Compromise.

  3. Mar 9, 2026 · 17:40 UTC
    Detected by SlowMist

    SlowMist flagged the anomalous transactions and published an initial alert.

  4. Mar 9, 2026 · 20:40 UTC
    Protocol response

    Tronix Exchange paused affected contracts or withdrawals and began tracing outbound flows.

  5. Mar 10, 2026 · 16:40 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Mar 16, 2026 · 16:40 UTC
    Partial recovery

    $22.0M of $88.0M recovered (25%); the remainder is still unaccounted for.

  7. Apr 8, 2026 · 16:40 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.