Back to dashboard
Tuesday, August 2, 2016 at 07:00 UTC

Bitfinex

Multisig hot wallet keys compromised; 120k BTC stolen.

Partial
Funds stolen
$72.00M
Recovered
$18.00M25%
Still outstanding
$54.00M
Chain
Bitcoin
Category
CEX
Attack vector
Private Key Compromise
Reported by
SlowMist
Incident ID
h2016-2

Exploit & recovery timeline

  1. Aug 2, 2016 · 05:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against Bitfinex.

  2. Aug 2, 2016 · 07:00 UTC
    Exploit executed

    $72.0M drained from Bitfinex on Bitcoin via Private Key Compromise.

  3. Aug 2, 2016 · 08:00 UTC
    Detected by SlowMist

    SlowMist flagged the anomalous transactions and published an initial alert.

  4. Aug 2, 2016 · 11:00 UTC
    Protocol response

    Bitfinex paused affected contracts or withdrawals and began tracing outbound flows.

  5. Aug 3, 2016 · 07:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Aug 9, 2016 · 07:00 UTC
    Partial recovery

    $18.0M of $72.0M recovered (25%); the remainder is still unaccounted for.

  7. Sep 1, 2016 · 07:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.