Sunday, October 18, 2026

Bithumb Hacked – Hackers Transferred $20 Million Worth Cryptocurrencies From Bithumb Wallet

Bithumb Hacked 3rd time, Yes, One of the worlds largest cryptocurrency exchange Bithumb Hacked by unknown cybercriminals and they have stolen nearly $20 million worth cryptocurrencies from its wallet.

Bithumb is a South Korean cryptocurrency exchange allegedly facing continuous cyber attacks since 2017, and this is 3 rd time in past 2 years.

Bithumb detected an unauthorized transaction of the company’s cryptocurrency through Bithumb’s abnormal trading monitoring system on 29th March.

https://twitter.com/DoveyWan/status/1111839155380801536

The attackers withdrew around 3 million EOS($13.4 million) and 20 million Ripple coins (XRP)($6 million).

https://twitter.com/DoveyWan/status/1111842113518489600

In June 2018 about $31 million of cryptocurrency was stolen from Bithumb in a hack since then, Now Bithumb hacked 3rd time again and it’s a second biggest attack in it’s history.

Bithumb believes that the incidents took place with the help of internal staff and said “it was our fault that we only focused on the defense of outside attack and lack of verification in internal staff.”

Hackers have stolen the private key from EOS account g4ydomrxhege and all the EOS was transferred to attackers wallet address ifguz3chmamg .

According to Dovey Wan , Founding Partner Primitive with wheatpond “EOS won’t be able to freeze this time, or it’s now too late, Hacker has been disposing of the stolen EOS via ChangeNow, a non-custodial crypto swap platform does not require KYC/account “

Bithumb Hacked

Bithumb said that all the stolen cryptocurrency is owned by a company, and all the member’s asset is under the protection of cold wallet.

“According to the company’s manual, Bithumb secured all the cryptocurrency from the detection time with a cold wallet and checked them by blocking deposit and withdrawal service.”

Internal investigation reveals that the incident is an “accident involving insiders” and also company said, “This won’t be happened again as we develop the internal workforce verification system.”

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access...

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how...

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a...

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign...

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting...

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial...

New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six...

Related Articles

Recent News