CryptoLoss

All incidents · Sep 23, 2023

Mixin's cloud-service database was attacked

MixinHot wallet or keysContainedEthereum, Bitcoin

In the early hours of September 23, 2023 (Hong Kong time), Mixin said the cloud provider's database was attacked. Some assets on mainnet were lost. A preliminary check put the amount at about $200 million. Deposits and withdrawals were paused. Transfers inside the service were not affected. On October 5 the project said the assets affected were mainly ERC20-USDT, ETH, and BTC. The compensation plan was still under discussion. No new dollar figure was published.

Loss
200million USD
Mixin's preliminary check · as of Sep 25, 2023

Sequence

Newest first · UTC

Oct 52023 · Thu

  1. The assets affected were mainly USDT, ETH, and BTC, and compensation was still under discussion

    Revision · Mixin · @MixinKernel

    Mixin said that after the count, what was affected was mainly ERC20-USDT, ETH, and BTC. Other assets were not affected. The specific compensation was still under discussion. The same update gave the next plan. A new system based on Mixin Safe was expected to go online in 3 to 4 weeks. Deposits and withdrawals would open only after about 2 more weeks of checks. There is no new dollar total here. The preliminary $200 million is still the main figure on the card.

    The specific compensation details are still under discussion.

    Mixin · Oct 5, 2023

Sep 272023 · Wed

  1. An on-chain message offered to leave $20 million as a bug bounty

    Industry · PeckShield · @peckshield

    PeckShield recorded an on-chain note Mixin sent to the other side. It said $20 million of assets could be kept as a bounty for this flaw. This is a proposal to get the funds back. It is not a figure already recovered.

    You can keep $20M of the assets as a BUG Bounty Reward for the BUG

    PeckShield · Sep 27, 2023

Sep 252023 · Mon

  1. Mixin disclosed the cloud-database attack, preliminarily about $200 million

    Confirmation · Mixin · @MixinKernel

    Mixin said that in the early hours of September 23, 2023 (Hong Kong time), the cloud provider's database was attacked. Some assets on mainnet were lost. They contacted Google and SlowMist. A preliminary check put the funds involved at about $200 million. Deposits and withdrawals were paused. They would reopen after nodes confirmed the flaw was fixed. Transfers were not affected during this period. What to do about the lost assets was left for a later announcement. Founder Feng Xiaodong was set to give a Chinese livestream at 13:00 on September 25 (Hong Kong time).

    After initial verification, the funds involved are approximately US$200 million.

    Mixin · Sep 25, 2023