BitoPro is the target of a possible hacker attack with losses of US$ 11,5 million

• BitoPro active wallet exploit investigated
• Funds were diverted by mixers such as Tornado and Wasabi
• ZachXBT exposes suspicious movements of Taiwanese exchange

Taiwan-based cryptocurrency exchange BitoPro is under the spotlight after suspicious transactions totaling around $11,5 million were detected by ZachXBT, an on-chain analyst widely recognized for his crypto investigations. The incident, which occurred on May 8, affected the company’s active wallets on several blockchain networks, including Ethereum, Tron, Polygon and Solana.

According to ZachXBT, the crypto assets were diverted to mixing platforms like Tornado Cash, in addition to being converted to Bitcoin via Thorchain and then forwarded to Wasabi, a common strategy to make it harder to track illicit assets. “The stolen funds were then deposited into Tornado or transferred to Bitcoin via Thorchain and deposited into Wasabi,” stated the detective on his Telegram channel.

The public revelation only occurred 25 days after the alleged attack, which generated immediate reactions from the platform's users. Pressured by the community, BitoPro officially acknowledged the incident only after ZachXBT's investigations were released.

Em release In an official statement released in Mandarin, BitoPro said the attack occurred during a scheduled update to its wallet system and asset transfer operations. The exchange said it activated emergency protocols at the time of the incident, transferring the remaining funds to secure wallets, blocking the malicious addresses and hiring a specialized security firm to conduct the investigation.

Despite the statement that user funds were not compromised, the exchange did not offer any explanation for the delay in disclosing the incident. Detailed information about the attack vector and those responsible remains restricted.

This episode brings to light similarities with the attack that occurred on Bybit earlier this year, where more than US$1,4 billion in digital assets were moved using tools such as Tornado, Wasabi and cross-chain bridges. In this case, the perpetrators were associated with the Lazarus group, which has links to North Korea.