Security incident · 2022-01-18
Crypto-com
According to the public DefiLlama incident dataset, Crypto-com (Ethereum, Bitcoin) suffered a security incident on 2022-01-18, with about $33.7M reported lost.
| Date | 2022-01-18 |
|---|---|
| Reported loss | $33.7M |
| Chain | Ethereum, Bitcoin |
| Target type | CEX |
| Technique class | Frontend & Infrastructure |
| Technique | Session Key Compromised |
| Bridge incident | No |
| Within 2022 | #15 by loss that year, 0.9% of all reported losses that year |
How this kind of attack works
The website, domain or hosting was hijacked, and users signed transactions that sent funds to the attacker from a page that looked normal.
Would a pre-payment check have helped
When a frontend or domain is hijacked the payee address is freshly generated and on no list, but the hijacked host is often already a known phishing domain, so endpoint screening catches part of this class.
Other incidents with the same technique
- Binance CEX2026-10-29 · $6.36B
- Mixin Network2023-09-23 · $200.0M
- Badger DAO2021-12-02 · $120.0M
- Atomic Wallet2023-06-03 · $100.0M
- Ledger (Supply Chain)2026-10-09 · $93.0M
- NiceHash2017-12-08 · $64.0M