Crypto exchange BigONE loses $27M in third-party attack

Key Points

1. BigONE confirmed a $27 million loss from a third-party attack targeting its hot wallet infrastructure.

2. The attack was detected on July 16, with abnormal asset movements leading to the discovery.

3. Private keys remained secure, but the attacker exploited the platform’s production network, likely through compromised CI/CD or server vulnerabilities.

4. Stolen funds included 120 Bitcoin, 350 ETH, and other tokens like CELR, SNT, and SHIB, later converted to WETH/ETH.

5. BigONE is collaborating with blockchain security firm SlowMist to recover the stolen funds.

6. The attack follows a trend of increasing crypto losses, with over $2.47 billion lost in the first half of 2025 due to hacks, scams, and exploits.