Crypto exchange BigONE has reported a security breach resulting in approximately $27 million in digital asset theft. Following the incident, the exchange has taken measures to recover lost funds and ensure user security.
Breach Details
According to blockchain security firm SlowMist, attackers infiltrated BigONE’s production environment by altering server logic related to account operations and risk controls. This manipulation allowed unauthorized withdrawals directly from user wallets, bypassing standard safeguards.
Recovery Measures
BigONE disclosed that the breach stemmed from a vulnerability in a third-party supply chain component. The affected system has been contained, and a comprehensive investigation is underway in partnership with SlowMist to trace the attacker’s wallet addresses and track fund movement across the blockchain. The exchange assured users that all private keys remain uncompromised and plans to restore assets using internal reserves and external liquidity.
Crypto Security Trends
This incident highlights a worrying trend in 2025: according to TRM Labs, over $2.1 billion in crypto assets have been stolen this year alone, mostly due to private key leaks and front-end security breaches.
The BigONE breach underscores the significant challenges facing the crypto industry regarding security. The exchange is committed to regaining user trust and ensuring transparency in its actions.