Incident All ledgers
Crypto-com: $33.7m
Crypto-com lost $33.7m on 18 January 2022. Ranked 94th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 18 January 2022
- Lost
- $33.7m
- Returned or repaid
- None recorded
- Target
- CEX
- Category
- Frontend & Infrastructure
- Method
- Session Key Compromised
- Chains
- Ethereum, Bitcoin
Attackers exploited a flaw in Crypto.com's two-factor authentication to withdraw about $33.7M in ETH, BTC and USD from 483 user accounts without entering 2FA codes.
Against the ledger
- It ranks 94th of the 1,272 incidents with a known loss, and 15th in 2022.
- It accounts for 21.2% of the $158.6m in known losses in January 2022.
- 93 incidents in the ledger are classified as Frontend & Infrastructure, for $7.49bn in total. This one is 0.4% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 09 Sept 2025 | SwissBorg | $41.5m | CEX | API Key Compromised | — |
| 12 Feb 2022 | IRA Financial / Gemini | $36.0m | CEX | API Key Compromised | — |
| 21 Jun 2018 | Bithumb | $31.0m | CEX | Key Leaked via Infrastructure | — |
| 12 Jul 2019 | BitPoint | $27.6m | CEX | Key Leaked via Infrastructure | — |
| 16 Jul 2025 | BigONE | $27.0m | CEX | Supply Chain Attack | — |
All failures in 2022 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Crypto-com, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/crypto-com-2022-01-18/. How this is built