A NullMeridian record Andromeda Logs

NullMeridianLog

23 Sep 2023 (Hong Kong time)

Mixin Network: Cloud Provider Database Attack, ~$200M Mainnet Assets

Mixin Kernel: early 23 Sep 2023 HKT, its cloud service provider's database was attacked, with loss of some mainnet assets (~US$200M). Deposits and withdrawals suspended.

  • Event date
  • Incident typeCustodial infrastructure compromise
  • Bug classThird-party access
  • Published

Loss, as sourced

Approximately US$200 million in mainnet assets, per Mixin Kernel announcement.

Traceability

Primary sources

  1. 01x.comMixin Kernel announcement (opens in a new tab)

In brief

Root cause: Per Mixin Kernel: attack on the database of its cloud service provider.

Timeline, as sourced: Early morning 23 Sep 2023 HKT; deposits/withdrawals suspended; Google and SlowMist engaged.

Account, as sourced

Claimed (Mixin Kernel) (X (opens in a new tab)): some mainnet assets lost; transfers remained available.

Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.

Permalinkhttps://andromeda.observer/e/mixin-cloud-database-2023