Bitcoin Depot Gets REKT: $3.6M of Company Bitcoin Takes a Walk Through IT Systems

In a plot twist that would make even FOMO Joe facepalm, Bitcoin Depot Inc. confirmed hackers made off with roughly 50.9 BTC—worth a cool $3.665 million—in a security breach back on March 23. Apparently, someone's keys had better things to do than stay secure.

The attackers snuck into the company's IT infrastructure and grabbed credentials for digital asset settlement accounts. From there, they executed unauthorized transfers of company-held cryptocurrency. Bonnie and Clyde are probably feeling a bit outdated right now—no masks, no getaway cars, just some crafty code and a direct line to the reserves. Classic digital bank job.

Once Bitcoin Depot spotted the breach, they kicked incident response protocols into gear and brought in external cybersecurity investigators to figure out how the hackers got in and lock down whatever was left. Law enforcement got the heads-up too, though no specific agencies were named. Hope they appreciate being the last to know.

On the bright side (kind of), customer-facing platforms and user data stayed untouched. So if you were using one of their ATMs to convert your cash into crypto, your info didn't get caught up in this mess. At least your KYC documents aren't floating around some darknet marketplace. Small wins, people.

The company hasn't issued any public statements beyond the SEC filing. Decrypt reached out for comment, but no response yet. Radio silence: the crypto industry's love language when things go sideways.

Bitcoin Depot classified the incident as material, flagging potential reputational damage plus legal, regulatory, and incident response costs. Their preliminary loss estimate sits at $3.665 million based on BTC's value at the time of the theft. The filing stayed quiet on whether they carry cyber insurance or how this might shake up their ATM network's liquidity operations. "Rugpulled by hackers" would hit different on the balance sheet.

This isn't Bitcoin Depot's first rodeo. Back in 2023, a separate breach exposed personal data for around 58,000 users. The company's also been under the regulatory microscope lately, rolling out stricter identity verification for all ATM transactions as authorities dial up oversight of the space. Two bites from the apple, if you're keeping score.

Despite the chaos, shares (BTM)