Singapore-based cryptocurrency exchange KuCoin discloses hack that emptied its hot wallets, with the minimum loss currently estimated at $150M
KuCoin said an intruder drained all its hot wallets today. — Singapore-based cryptocurrency exchange KuCoin disclosed today a mega hack.
ZDNetCatalin Cimpanu
Context & Ripple Effects
KuCoin's disclosure lands in a long lineage of exchange hot-wallet compromises: the Bitfinex breach that drained roughly 120K bitcoins in 2016 knocked Bitcoin down almost 20%, and Binance's 2019 theft of 7,000 bitcoins established the template of an exchange absorbing losses from its own insurance reserve. At a minimum $150M, KuCoin's loss matches what BitMart would later report when its Ethereum and Binance Smart Chain hot wallets were breached.
The repetition matters as much as the size — four years after KuCoin, BingX lost $43M from its own hot wallet — making hot-wallet architecture, rather than any single exchange's hygiene, the recurring failure point in the corpus.
First-order effects
KuCoin users whose assets sat in hot wallets face direct exposure, with the exchange confirming every hot wallet was drained and losses still being tallied from a $150M floor.
Tokens held on KuCoin suddenly have a large stolen overhang, since the intruder controls assets that can be moved or sold — the same dynamic that sent Bitcoin down almost 20% after Bitfinex.
Second-order effects
Rival exchanges are pushed to publicize their own safeguards: Binance's decision to cover its 2017K-scale theft through its Secure Asset Fund turned proof-of-resilience into a competitive weapon, forcing peers without similar reserves into defensive messaging.
The identical ~$150M hot-wallet loss BitMart later reported shows the knock-on lesson going unlearned, keeping pressure on custodial infrastructure vendors and insurers serving exchanges.
Third-order effects
If the Bitfinex–Binance–KuCoin–BitMart–BingX pattern holds, regulators and institutional counterparties will treat hot-wallet holdings as uninsurable risk, pushing the industry toward cold-storage-heavy custody and formalized insurance funds as table stakes.
The trend: Exchange hot-wallet breaches keep recurring at nine-figure scale across years and jurisdictions, turning custody architecture and verifiable reserves into the crypto sector's defining trust battleground.
UPDATE FROM @KUCOINCOM: “We detected some large withdrawals since September 26, 2020 at 03:05:37 (UTC+8). Please rest assured that if any user fund is affected by this incident, it will be covered completely by KuCoin and our insurance fund.” https://www.kucoin.com/...
@panama_tj
Panama Crypto on x
That took long, so far exchanges have not dropped the ball on security on 2020 until now. Ugly duck Kucoin got hacked. https://decrypt.co/... https://twitter.com/...
@rubenmerre
Ruben Merre on x
Kucoin, the 6th most secure exchange in the world according to @cer_live, has just been hacked for $150M. We're heading into 2021, yet exchange hacks & security remain a huge issue. If you think you're safe, think again. Get a #coldwallet! #OwnYourAssets https://decrypt.co/...
@cryptorank_io
CryptoRank Platfrom on x
📣 Good news! According to the recent post of @Kucoincom any user fund affected by the last incident will be covered completely by Kucoin and its insurance fund.💰 👉 https://www.kucoin.com/... https://twitter.com/...
@kucoincom
Kucoin on x
The Latest Updates about #KuCoin Security Incident ✅ @VIDT_Datalink will freeze the $VIDT that were transferred to the suspicious address ✅ @SilentNotary will re-issue new $SNTR, and replace all affected tokens We will continuously update the progress: https://kucoin.com/... http…
@250smurf
Taylor Kennedy on x
As long as there are locks, there will be people trying to pick them. 👉Hardware Wallets (I like Ledger Nano), MetaMask, and safe practices. Take the time to learn them. The threats are real and out there - it's on you to keep your funds SAFU. https://decrypt.co/...
@lukso_io
Lukso on x
. @kucoincom is actively working in controlling the damage. The KC team informed us: 1. The funds affected contain a small part of their total assets holdings 2. If any user fund is affected by this incident, they will be covered completely by KuCoin and the insurance fund https:…
@dgwbirch
@dgwbirch on x
Help! I want my anonymous untraceable electronic money back part 97: KuCoin https://decrypt.co/... hat tip @chainyoda
@akropolisio
Akropolis on x
In response to the recent @kucoincom Security incident, we paused all the transfers of $AKRO. More updates to follow shortly. Don't try to transfer tokens or swap on DEXes. CEXes trading working fine. https://twitter.com/...
@kucoincom
Kucoin on x
In response to the recent KuCoin Security Incident, KuCoin Global CEO Johnny Lyu @lyu_johnny hosted a livestream at 12:30 (UTC+8) on September 26, 2020, and announced more updates regarding the incident. Read the full recap of the livestream here: https://www.kucoin.com/... https…
@ourielohayon
Ouriel Ohayon on x
So the promised refund seems to be only in the cold wallet. Not the hot wallet (where the hack happened). Crypto Insurances (if they have one) typically cover only cold wallets. That's what “we are insured” usually means In other terms. You are in trouble https://twitter.com/...