Incident All ledgers
BitoPro: $11.5m
BitoPro lost $11.5m on 8 May 2025. Ranked 181st of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 8 May 2025
- Lost
- $11.5m
- Returned or repaid
- None recorded
- Target
- CEX
- Category
- Frontend & Infrastructure
- Method
- Key Leaked via Infrastructure
- Chains
- Ethereum, Tron, Solana, Polygon
Attackers socially engineered a cloud operations staff member at the BitoPro exchange, planted malware, and drained hot wallets on several blockchains during a system update, taking about $11.5 million. The attack was attributed to North Korea's Lazarus group based on its patterns and methods.
Against the ledger
- It ranks 181st of the 1,272 incidents with a known loss, and 19th in 2025.
- It accounts for 4.6% of the $251.7m in known losses in May 2025.
- 93 incidents in the ledger are classified as Frontend & Infrastructure, for $7.49bn in total. This one is 0.2% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 25 Jan 2026 | Matcha | $13.4m | DeFi Protocol | Frontend Compromise | — |
| 07 Sept 2023 | Fortress Trust | $12.0m | CEX | Key Leaked via Infrastructure | — |
| 30 Oct 2025 | Garden | $11.4m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 28 Jan 2025 | DogWifTools | $10.0m | Other | Key Stored Publicly | — |
| 27 Feb 2023 | MyAlgo | $9.2m | Wallet | CDN Compromise | — |
All failures in 2025 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “BitoPro, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/bitopro-2025-05-08/. How this is built