17.07.2025 13:06

Seychelles-based cryptocurrency exchange BigONE suffered a significant security breach resulting in the theft of approximately $27 million worth of digital assets. This substantial loss stemmed from a sophisticated third-party supply chain attack compromising their hot wallet infrastructure, as confirmed by the exchange itself and independently verified by blockchain security firm SlowMist.

The attack, discovered in the early hours of July 16th, involved unauthorized access to BigONE's production network. SlowMist's investigation revealed that the attackers manipulated the server logic controlling account and risk management functions, facilitating the illicit withdrawal of funds. Importantly, BigONE emphasized that despite the breach, its private keys remained unaffected.

The stolen assets encompassed a range of cryptocurrencies, including 120 BTC, 350 ETH, 1,800 SOL, and approximately 8.54 million USDT across multiple networks. Other impacted digital assets included Dogecoin, Shiba Inu, and CELR, totaling eight different cryptocurrencies. Despite this significant loss, BigONE assures users that its private key security remains intact and that the attack vector has been successfully neutralized, preventing further exploitation.

BigONE's response has been swift and decisive. They've launched a comprehensive system recovery program and are collaborating with SlowMist to track the stolen funds and identify the perpetrators. Most importantly, the exchange has pledged complete reimbursement to all affected users, leveraging its internal reserves to ensure full compensation for the losses incurred during this incident. This commitment underscores BigONE's dedication to user protection and its resolve to overcome this security challenge.