Connect with us
DAPA Banner

Crypto World

Bitcoin Depot didn’t spot 50 BTC hack for three days, report

Published

on

Bitcoin Depot didn’t spot 50 BTC hack for three days, report

Bitcoin Depot Inc. reportedly failed to spot a data breach that resulted in the loss of over 50 bitcoins (BTC) worth $3.7 million for three days.

The BTC ATM operator disclosed the loss of 50.9 BTC in an SEC filing earlier this week, stating that the attacker gained access to its IT systems and its digital asset settlement accounts on March 23.

This, it says, allowed them to move the BTC from company-controlled wallets.

However, according to subsequent research from onchain sleuth ZachXBT, the breach actually occurred three days earlier on March 20.

Advertisement

“On April 6, 2026 Bitcoin Depot disclosed in an SEC 8K filing it uncovered an incident on March 23, 2026 which resulted in 50.9 BTC ($3.6M) stolen,” wrote Zach on Telegram.

“However the report did not include theft addresses so I manually traced out the incident onchain and found 19 high confidence theft addresses from March 20.

This means it took three days for Bitcoin Depot to notice the funds were missing from its business.”

Read more: Inside the $280M Drift hack: weeks of setup, minutes to drain

Zach continued, “A delta of 3.55 BTC (54.45 BTC total) vs 50.9 BTC reported was found indicating other employee personal accounts may have also been impacted.

Advertisement

“54 BTC ($3.7M) flowed to KuCoin, a crypto exchange increasingly used by illicit actors. 

“At the time of my post the theft addresses still have not been reported in any compliance tools I use.”

According to the SEC filing, Bitcoin Depot is continuing to investigate the nature and scope of the incident with the assistance of unnamed “third-party specialists.”

It also says it’s “working with its outside cybersecurity experts to further reinforce its information technology systems and to prevent future unauthorized access.”

Advertisement

It also reassures users that no customer personally identifiable information was accessed, but does add that the “investigation remains ongoing.”

Got a tip? Send us an email securely via Protos Leaks. For more informed news and investigations, follow us on XBluesky, and Google News, or subscribe to our YouTube channel.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Trader’s $3M Fartcoin Bet Unravels, Triggering Hyperliquid ADL

Published

on

Trader’s $3M Fartcoin Bet Unravels, Triggering Hyperliquid ADL

A trader lost about $3 million after building a large leveraged Fartcoin position on Hyperliquid that unraveled in thin liquidity, triggering the platform’s auto-deleveraging (ADL) mechanism.

Hyperliquid data flagged by Lookonchain shows that the trader accumulated about 145 million tokens across multiple wallets before being liquidated. The liquidation redistributed gains to opposing traders, with at least two wallets seeing around $849,000 through ADL. 

PeckShield said the unwind produced about $3 million in accounting losses and left Hyperliquid’s HLP vault down roughly $1.5 million over 24 hours, though Hyperliquid had not publicly confirmed those figures by publication.

The episode highlighted how ADL can crystallize gains for traders on the other side of a collapsing position, while raising fresh questions about how Hyperliquid’s liquidation and vault structure behave in low-liquidity markets.

Advertisement
One of the wallets that profited from the redistribution. Source: Hyperdash

PeckShield said the activity appeared structured to trigger liquidations in low-liquidity conditions, potentially pushing losses onto Hyperliquid’s liquidity pool while being offset by positions elsewhere.

Cointelegraph reached out to Hyperliquid for comments, but had not received a response before publication. 

Source: PeckShieldAlert

Past trades exposed similar pressure on Hyperliquid’s liquidity system

This is not the first time Hyperliquid’s liquidity system has come under pressure from large, concentrated positions. 

On March 13, 2025, the platform’s Hyperliquidity Provider (HLP) vault took a roughly $4 million hit after an oversized Ether (ETH) position was unwound, triggering liquidations under thin market conditions. After the incident, the team said that losses stemmed from market dynamics rather than a protocol exploit. 

Related: Onchain perp DEX volumes fall for five straight months after October peak

A similar episode occurred later that month involving the JELLY memecoin. On March 27, 2025, a trader used multiple leveraged positions to exploit the platform’s liquidation system.

Advertisement

However, the final outcome remained unclear, with Arkham saying the trader withdrew about $6.26 million but may still have ended up down nearly $1 million.

On Nov. 13, 2025, a similar pattern occurred when a trader built large leveraged positions in the POPCAT market, triggering cascading liquidations that left a $5 million hole in the HLP vault. Community members said the strategy appeared designed to create and then remove liquidity to force the vault to absorb the impact. 

Magazine: Solana exec trolls crypto gamers, Pixel tackles play-to-earn issues: Web3 Gamer

Advertisement