Back to dashboard
Saturday, April 22, 2017 at 12:00 UTC

Yapizon

Hot wallets emptied from Korean exchange.

Lost
Funds stolen
$5.30M
Recovered
$0.00M0%
Still outstanding
$5.30M
Chain
Bitcoin
Category
CEX
Attack vector
Private Key Compromise
Reported by
SlowMist
Incident ID
h2017-1

Exploit & recovery timeline

  1. Apr 22, 2017 · 10:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against Yapizon.

  2. Apr 22, 2017 · 12:00 UTC
    Exploit executed

    $5.3M drained from Yapizon on Bitcoin via Private Key Compromise.

  3. Apr 22, 2017 · 13:00 UTC
    Detected by SlowMist

    SlowMist flagged the anomalous transactions and published an initial alert.

  4. Apr 22, 2017 · 16:00 UTC
    Protocol response

    Yapizon paused affected contracts or withdrawals and began tracing outbound flows.

  5. Apr 23, 2017 · 12:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. May 22, 2017 · 12:00 UTC
    Funds written off

    No assets recovered; losses absorbed by the protocol, insurers, or users.