20 Sep 2024, ~4:00 UTC+8
BingX: Unauthorized Intrusion into One Hot Wallet
BingX: at ~4:00 UTC+8 on 20 Sep 2024 it confirmed an incident affecting one hot wallet. System isolated; most funds said to be in unaffected cold wallets; $10M frozen in recovery efforts.
- Event date
- Incident typeExchange hot-wallet incident
- Bug classNot yet published
- Published
Loss, as sourced
BingX does not state a total loss figure in its AMA recap. It says it had frozen $10 million as part of recovery efforts and that the majority of funds are in cold wallets that were not impacted.
Traceability
Primary sources
In brief
Root cause: Not published. BingX confirms unauthorized intrusion into one hot wallet; vector not described in the AMA recap.
Timeline, as sourced: Per BingX: ~4:00 UTC+8 20 Sep confirmed; compromised system isolated; external firms including SlowMist and Chainalysis engaged; AMA the same day.
Account, as sourced
Claimed (BingX) (AMA recap (opens in a new tab)): one hot wallet; majority of funds in cold storage; $10M frozen so far.
Unknown: attack vector and total loss.
Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.