Mixin Network (2023) — Crypto Hack
LaunderedMixin Network's cloud database was compromised, exposing private keys and resulting in $200M in losses.
Summary
Mixin Network's cloud database was compromised, exposing private keys and resulting in $200M in losses.
How It Was Compromised — Bridge via Database Compromise
Mixin Network's cloud service provider database was attacked, leaking private keys for multiple assets. The attack exploited Mixin's centralized key management architecture where hot wallet keys were stored in a third-party cloud database. Assets across multiple blockchains were drained.
Fund Flow & Laundering Analysis
Stolen funds moved to multiple addresses across Ethereum and Bitcoin. Significant ETH converted via Uniswap and other DEXes. Bitcoin routed through mixing services. Mixin suspended deposits and withdrawals. The team offered a $20M bug bounty to recover funds, with limited success.