Back to dashboard
Wednesday, June 20, 2018 at 10:00 UTC

Bithumb

Insider-aided wallet compromise.

Partial
Funds stolen
$31.00M
Recovered
$14.00M45%
Still outstanding
$17.00M
Chain
Ethereum
Category
CEX
Attack vector
Private Key Compromise
Reported by
SlowMist
Incident ID
h2018-3

Exploit & recovery timeline

  1. Jun 20, 2018 · 08:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against Bithumb.

  2. Jun 20, 2018 · 10:00 UTC
    Exploit executed

    $31.0M drained from Bithumb on Ethereum via Private Key Compromise.

  3. Jun 20, 2018 · 11:00 UTC
    Detected by SlowMist

    SlowMist flagged the anomalous transactions and published an initial alert.

  4. Jun 20, 2018 · 14:00 UTC
    Protocol response

    Bithumb paused affected contracts or withdrawals and began tracing outbound flows.

  5. Jun 21, 2018 · 10:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Jun 27, 2018 · 10:00 UTC
    Partial recovery

    $14.0M of $31.0M recovered (45%); the remainder is still unaccounted for.

  7. Jul 20, 2018 · 10:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.