Back to dashboard
Friday, September 22, 2023 at 15:00 UTC

Mixin Network

Cloud database breach exposed deposit keys.

Partial
Funds stolen
$200.00M
Recovered
$20.00M10%
Still outstanding
$180.00M
Chain
Ethereum
Category
Bridge
Attack vector
Bridge Exploit
Reported by
CertiK
Incident ID
h2023-5

Exploit & recovery timeline

  1. Sep 22, 2023 · 13:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the bridge exploit exploit against Mixin Network.

  2. Sep 22, 2023 · 15:00 UTC
    Exploit executed

    $200.0M drained from Mixin Network on Ethereum via Bridge Exploit.

  3. Sep 22, 2023 · 16:00 UTC
    Detected by CertiK

    CertiK flagged the anomalous transactions and published an initial alert.

  4. Sep 22, 2023 · 19:00 UTC
    Protocol response

    Mixin Network paused affected contracts or withdrawals and began tracing outbound flows.

  5. Sep 23, 2023 · 15:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Sep 29, 2023 · 15:00 UTC
    Partial recovery

    $20.0M of $200.0M recovered (10%); the remainder is still unaccounted for.

  7. Oct 22, 2023 · 15:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.