Hackers stole $14.5 million from BitoPro and Nervos Network platforms
Date: 2025-06-02 Author: Oliver Abernathy Categories: BUSINESS
On May 8, digital assets worth about $11.5 million were withdrawn from hot wallets of the BitoPro cryptocurrency exchange, but the public only learned about this on June 2. On-chain analyst ZachXBT was the first to report suspicious transactions. He noted that assets, including in the Ethereum, Tron, Solana, and Polygon networks, were quickly transferred to Tornado Cash, a popular crypto mixer that provides anonymity. Additionally, part of the funds were converted into bitcoins through Thorchain and then moved to the Wasabi Wallet, known for its privacy tools.
Although the incident occurred in early May, official confirmation from BitoPro appeared almost a month later. The exchange representatives explained that on the day after the attack, May 9, they suspended the withdrawal of funds under the pretext of "technical work." Later, in an official statement, the platform admitted that the hack did indeed take place during the process of moving coins inside the hot wallet.
According to BitoPro, the emergency response system worked quickly: the remaining assets were transferred to a new wallet, and the actions of the attackers were blocked. The exchange also hired an external cybersecurity company to investigate the incident. At the same time, the platform representatives assured that the reserves fully cover possible losses, and users will not be harmed. The details of the investigation, as well as the reasons for the delay in disclosing information, have not yet been disclosed.
On the same day, June 2, another incident became known from Cyvers Alerts analysts: attackers withdrew about $3 million from the Nervos Network modular blockchain. The attack resulted in the theft of various tokens, including:
- 257,800 USDT,
- 898,300 USDC,
- 60,300 DAI,
- 539.09 ETH,
- 0.79 WBTC.
All of these funds were also converted to Ethereum and sent via Tornado Cash, making them difficult to track. In response, the Nervos Network team suspended all smart contracts and began investigating the incident.
It should be noted that in May, the total damage to the cryptocurrency industry from hacker attacks amounted to $244 million, which is 40% less than in April.
