Crypto.com CEO Kris Marszalek admits the company accidentally sent 320K ETH (~$416M) meant for cold storage to crypto exchange Gate.io, which returned the funds
There are very suspect events happening at Crypto.Com. Vishal Chawla / The Block : Crypto.com accidentally transferred $400 million worth of ETH to another exchange, CEO says Justin Roberti / Benzinga : 20% Of Crypto.com Reserves Are On This Meme Coin Tweets: @kris : @ledgerstatus @jconorgrogan It was supposed to be a move to a new cold storage address, but was sent to a whitelisted external exchange address. We worked with Gate team and the funds were subsequently returned to our cold storage. New process and features were implemented to prevent this from reoccurring. @kris : @TraderWize ... To simplify for people who don't understand how hedging works in this scenario: we deposit USDC, use it to buy other coins on the exchange and withdraw back to our wallets. @gate_io : Clarifications on @cryptocom's transfer for the sake of transparency & education: 1) Snapshot for PoR audit taken on Oct 19. https://crypto.com/'s deposit was not included https://proof-of-reserves.trustexplorer .io/ ... 2) All 320K ETH were returned https://etherscan.io/... https://www.gate.io/... Conor / @jconorgrogan : Anyone know why https://crypto.com/ would send 320k ETH (82% of their ETH today) to https://gate.io/ on October 21? https://twitter.com/... @shegenerates : Confirmed: crypto .com “accidentally” sent 320k eth of user deposits to Gate .io on Oct 21st Oct 28: Gate shows “proof of reserves” & then sends 285,000 eth back This was topping up for the proof. Gate and crypto .com are fucked? https://etherscan.io/... https://twitter.com/... https://twitter.com/... @thormaximalist : Why would an an exchange would be hedging at all? @cryptocom deposited $1B of USDC on FTX. If your reserves are 1:1, you are not exposed to asset prices, your customers are. Where is the money backing $1B+ of $cro stablecoins? https://twitter.com/... @coloradotravis : The big outlets do not appear to be tracking this angle instead credulously buying into the, “whups this was just a mistake where we sent all our money to someone for 5 days” story from the CEO. Curious times. 2/2 https://www.wsj.com/... @chainlinkgod : To be clear, I don't claim to have any evidence of malicious intent or insolvency But given their historical operational failures—misplacing $400M of customer's ETH—I don't exactly have high confidence https://twitter.com/... Cas Piancey / @caspiancey : Exchanges sending their reserves to each other to take “snapshot audits” is like two criminals relying on each other for a solid alibi. Satoshi Stacker / @stackersatoshi : BREAKING: Crypto. com CEO Kris explaining the situation where they sent $400,000,000 to Gate. io by mistake. https://twitter.com/... Dr Humma Saif / @hummasaif : We “accidentally” sent $400 million of company's ETH to the wrong wallet: Crypto_com CEO , quite a random mistake at worst possible time rt https://twitter.com/... @shegenerates : Gate confirms the 320k eth from crypto .com was not included in their reserves audit. If that's true, then it's very unlikely they have any hole or issues at all. And in fact the incompetence is 100% on the crypto .com side https://twitter.com/... Brad Sams / @bdsams : I am starting to think, and hear me out, that the wild-west of finance isn't exactly a reliable place to park your money. https://twitter.com/... @coffeebreak_yt : crypto-com sending gate-io tons of eth suddenly makes sense. Insane levels of fraud. https://twitter.com/... @coffeebreak_yt : Crypto_com CEO is claiming they “accidentally” sent $400 million of their eth to the wrong wallet. He's either lying, or incompetent. https://twitter.com/... @sassal0x : The fact that this can even happen is insane to me Get your coins off every single centralised service/exchange and onto a hardware wallet Do it now https://twitter.com/... @cryptoseq : This is also from an exchange which accidentally sent $10 million to a user instead of a $100 withdrawal and didn't realise for 7 months... and people think their funds are safe stored on there? https://blockworks.co/... https://twitter.com/... Neville Hobson / @jangles : More fuel on the fire of burnt credibility of some major players in the #crypto market https://twitter.com/... Ethan Mollick / @emollick : And there have been signs in just the last two hours that this is not the end of big crypto dominos to fall... (Corporate governance structures may be boring & financial regulations may be stifling, but the world without them isn't that pretty, either) https://twitter.com/...
Context & Ripple Effects
Crypto.com had already faced a security breach affecting 483 users, after which it said customers were reimbursed. A separate court account of a $10.5M mistaken transfer attributed an earlier error to incorrect spreadsheet data entry, making the latest disclosure part of a broader record of operational-control failures.
Gate.io’s return of the assets prevented an immediate loss, but the episode puts Crypto.com’s custody procedures—not only its ability to reimburse users after breaches—at the center of customer trust.
First-order effects
- Crypto.com must rely on the new process and product safeguards it says it implemented to prevent another transfer to a whitelisted external address.
- Gate.io’s return restores the assets to Crypto.com’s cold storage, while demonstrating that Crypto.com’s recovery depended on the receiving exchange’s cooperation.
Second-order effects
- Crypto.com customers and counterparties have a fresh reason to scrutinize the exchange’s transfer controls alongside its response to the earlier unauthorized-withdrawal incident.
- Other exchanges seeking to distinguish their custody operations gain an incentive to emphasize approval workflows and safeguards around whitelisted withdrawal addresses.
Third-order effects
- Repeated security and transfer errors shift competition among centralized exchanges toward operational trust infrastructure: custody controls, recovery procedures, and evidence that customer assets can be protected.
- If such incidents persist, proof-of-reserves disclosures alone may be insufficient for customers assessing exchange risk; the reliability of internal movement controls becomes part of the trust standard.
The trend: Centralized crypto exchanges are being judged increasingly on the operational controls behind custody, not just the assets they report holding.