Crypto.com halted withdrawals and requires users to re-sign-in and reset 2FA; research shows Crypto.com lost 4,600+ ETH, worth $15M+, during a suspected hack
The crypto exchange has reportedly lost at least $15 million in Ethereum, and security experts believe the true losses could be much higher.
Crypto.com users temporarily lose withdrawal access and must re-authenticate and reset two-factor authentication while the exchange contains the incident.
Crypto.com faces the direct cost of making affected customers whole, after later putting the breach’s unauthorized withdrawals at about $33.84 million.
Second-order effects
The consecutive Crypto.com and BitMart incidents make wallet security and incident-response terms more consequential points of competition among crypto exchanges.
Customers holding Ethereum on centralized exchanges have a clearer reason to weigh platform custody controls and recovery commitments when choosing where to trade or store assets.
Third-order effects
Repeated exchange breaches push the sector’s legitimacy challenge beyond asset-price risk toward whether platforms can provide bank-like protection and remediation for customer balances.
If reimbursement becomes the expected response to custody failures, exchanges’ security spending and reserve capacity become more central to their operating model.
The trend: Crypto exchanges are being judged increasingly on custody resilience and their ability to compensate customers after security failures.
We have a small number of users reporting suspicious activity on their accounts. We will be pausing withdrawals shortly, as our team is investigating. All funds are safe.
1/2 Earlier today a small number of users experienced unauthorized activity in their accounts. All funds are safe. In an abundance of caution, security on all accounts is being enhanced, requiring users to: -Sign back into their App & Exchange accounts -Reset their 2FA
The @cryptocom loss is about $15M with at least 4.6K ETHs and half of them are currently being washed via @TornadoCash https://etherscan.io/... https://twitter.com/... https://twitter.com/...
Update: Withdrawal services have been restored. All funds are safe. It will take time to clear the backlogs. We appreciate your patience. https://twitter.com/...
I see odd activity on one of the Ethereum hot wallets on https://crypto.com/ - https://etherscan.io/... It's a pattern, the wallets receiving look like this https://etherscan.io/..., multiple of the same transactions to a new wallet between 2-5 ETH, funds not moved after that. ht…
In an email, Crypto[.]com refused to confirm the Peckshield tweet estimating that $15 million of user funds were stolen yesterday. They stand by what their CEO said, that no user funds were stolen https://twitter.com/...
2/2 This update will be rolled out to users progressively over the next few hours. Once complete, withdrawals will be re-enabled. We understand this may be an inconvenience, but security comes first. Thank you for your support.
also in the news today: “Several users had reported on social media that their cryptocurrencies, at times equating to tens of thousands of dollars, had disappeared from their https://crypto.com/ accounts” https://www.bloomberg.com/... https://twitter.com/...
Withdrawals have been resumed. Please allow us some time to catch up with the backlog accumulated over the last couple of hours. The team also beefed up the 2FA systems to deal with increased traffic. Thank you for your patience. https://twitter.com/...