Incident All ledgers
Indodax: $25.2m
Indodax lost $25.2m on 10 September 2024. Ranked 115th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 10 September 2024
- Lost
- $25.2m
- Returned or repaid
- None recorded
- Target
- CEX
- Category
- Frontend & Infrastructure
- Method
- Key Leaked via Infrastructure
- Chains
- Ethereum, Polygon, Optimism
On September 10, 2024, Indonesian exchange Indodax lost about $25.47 million from its hot wallet, including roughly 5,204 ETH plus other assets. Private keys were not compromised, suggesting the withdrawal protocol itself was breached.
Against the ledger
- It ranks 115th of the 1,272 incidents with a known loss, and 12th in 2024.
- It accounts for 20.3% of the $123.9m in known losses in September 2024.
- 93 incidents in the ledger are classified as Frontend & Infrastructure, for $7.49bn in total. This one is 0.3% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 12 Jul 2019 | BitPoint | $27.6m | CEX | Key Leaked via Infrastructure | — |
| 16 Jul 2025 | BigONE | $27.0m | CEX | Supply Chain Attack | — |
| 18 Feb 2024 | FixedFloat | $26.1m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 18 Nov 2023 | Kronos Research | $26.0m | Other | API Key Compromised | — |
| 21 Mar 2026 | Resolv USR | $24.5m | DeFi Protocol | Key Leaked via Infrastructure | — |
All failures in 2024 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Indodax, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/indodax-2024-09-10/. How this is built