Mixin Network Hack 2023 — $200M Exploit Analysis

Mixin Network's cloud database was compromised, exposing private keys and resulting in $200M in losses.

Details

• Date: 2023-09-23
• Amount Lost: $200,000,000
• Chain(s): Ethereum, Bitcoin, Others
• Category: Bridge
• Technique: Database Compromise
• Status: Laundered
• Amount Recovered: None reported

Full Description

Mixin Network's cloud service provider database was attacked, leaking private keys for multiple assets. The attack exploited Mixin's centralized key management architecture where hot wallet keys were stored in a third-party cloud database. Assets across multiple blockchains were drained.

Laundering Analysis

Stolen funds moved to multiple addresses across Ethereum and Bitcoin. Significant ETH converted via Uniswap and other DEXes. Bitcoin routed through mixing services. Mixin suspended deposits and withdrawals. The team offered a $20M bug bounty to recover funds, with limited success.

Sources

• https://mixin.one/newsroom/20230925
• https://rekt.news/mixin-rekt/

Transaction Hashes

• Multiple transactions - see Mixin announcement

Related Hacks

• Ronin Network (Axie Infinity) — 2022-03-23 — $625M
• Poly Network — 2021-08-10 — $611M
• BNB Chain Bridge (BSC Token Hub) — 2022-10-07 — $570M
• Wormhole — 2022-02-02 — $320M
• Nomad Bridge — 2022-08-01 — $190M

Back to Browse