Bitcoin Depot's Security Team Takes a 3-Day Coffee Break, Hackers Pocket $3.6M

Bitcoin Depot finds itself back in the headlines after revealing a cyberattack that sent $3.665 million packing on March 23rd. The company, operating the largest Bitcoin ATM network, also announced it's bracing for a 40% revenue hit this year. The 8K filing with the SEC laid out the gory details: attackers compromised credentials, waltzed into internal systems, and made off with 50.903 BTC. Three days later, on March 26th, they appointed a new CEO, Alex Holmes. Apparently, when your vault gets raided, the solution is fresh executive blood—or maybe just better coffee in the break room.

On-chain detective ZachXBT did some digging and uncovered something interesting. The suspicious outflows actually happened on March 20th. The funds? Routed to Kucoin deposit addresses. Bitcoin Depot took a full three days to notice someone was raiding the vault. The community wasn't impressed. One user summed it up: "A 3-day delay is too long for such a significant security breach." The gap between threat actors and those supposed to protect funds? Apparently, wide enough to drive a truck through. Meanwhile, attackers tried pulling off an even bigger heist on Bybit. We're talking $1 billion, using techniques reminiscent of the Mt. Gox era. Fortunately, Bybit's risk control team spotted the fake deposit attacks and shut them down. A win for crypto, this time.

In other news, ZachXBT uncovered a monthly fraud machine siphoning $1 million from the crypto space. A North Korean payment server ran the operation, coordinating over 390 accounts. Users moved funds through Chinese bank accounts and platforms like Payoneer to convert everything to fiat. Classic DPRK IT worker patterns, apparently. Because when you run a crypto fraud empire, you might as well go international.