Skip to content

Crypto.com

Disclosed Jan 18, 20224 years ago483 affectedUnverified

2FA bypass lets attackers drain about $34 million from 483 Crypto.com users

Crypto.com said transactions were approved without users' two-factor codes, leading to unauthorized withdrawals of about $15 million in ETH, $19 million in BTC and other assets from 483 accounts. The company reimbursed affected users and paused withdrawals for 14 hours.

What is known

People affected483 (as reported by the organization)
DisclosedJan 18, 2022
AttackHacking
Data exposedFinancial
SectorCrypto · SG
StatusUnverified: not yet confirmed by an official notice, a filing or the organization

Sources

Notices filed

WhereFiledPeople
ResearchtotalJan 18, 2022483
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Crypto.com

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.