Cyber Incident Victim: Bitfinex
Date:
Aug 2016
Location:
Hong Kong
Summary
A Hong Kong-based cryptocurrency exchange suffered a significant security breach resulting in the theft of $65 million worth of bitcoin, prompting an immediate suspension of all trading and withdrawals. The incident caused bitcoin's market value to drop sharply, with losses exceeding 13% over two days, while the platform assured users that only bitcoin wallets were compromised and other digital currencies remained unaffected. Law enforcement was notified, and the exchange initiated an investigation to address customer losses and resume operations, drawing comparisons to previous high-profile cryptocurrency exchange breaches.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On August 2, 2016, Hong Kong-based cryptocurrency exchange Bitfinex suspended all trading following the discovery of a security breach that resulted in the theft of approximately $65 million worth of bitcoin. The exchange immediately halted digital token deposits and withdrawals, took its website offline, and displayed a maintenance page while initiating an investigation. Bitfinex confirmed that the breach impacted some users' bitcoin wallets but clarified that other digital currencies traded on its platform remained unaffected. The company reported the incident to law enforcement agencies but did not disclose technical details about how attackers bypassed security controls or the exact number of affected users during the initial disclosure.
The theft triggered immediate market repercussions, with bitcoin prices plunging 5.3% against the dollar on the day of the announcement and declining 13% over a two-day period. Industry observers, including Coinbase co-founder Fred Ehrsam, characterized the breach as significant due to Bitfinex's status as one of the largest digital currency exchanges, though they noted Bitcoin's historical resilience to similar incidents. Bitfinex stated its intent to conduct accounting adjustments to normalize user balances before resuming operations, with plans to address customer compensation later in the investigation. The incident drew comparisons to the 2014 Mt. Gox hack, which resulted in $300 million in losses and bankruptcy proceedings, though Bitfinex did not indicate imminent financial collapse. No additional system compromises or data exposures beyond the bitcoin wallet theft were confirmed in the immediate aftermath.