Cyber Incident Victim: BitGrail
Date:
Feb 2018
Location:
Italy
Summary
A cryptocurrency exchange suffered a security breach resulting in the loss of approximately 17 million Nano tokens valued at around $170 million, prompting suspension of all operations and notification to authorities. Prior to the incident, the platform had imposed mandatory identity verification and restricted withdrawals to Bitcoin only, fueling user concerns about insolvency and potential exit scams. The exchange owner attributed the losses to theft and disputed claims of financial instability, while the Nano development team clarified the issue originated at the exchange level rather than their protocol. The event triggered significant price volatility for Nano, with substantial declines following both the policy changes and the subsequent breach disclosure.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On February 9, 2018, cryptocurrency exchange BitGrail announced a security incident involving unauthorized transactions that resulted in the loss of 17 million Nano tokens, valued at approximately $170 million at the time of the breach. The exchange immediately suspended all cryptocurrency operations and redirected its homepage to a notice disclosing the hack, confirming that authorities had been contacted to investigate the missing assets. This disclosure followed weeks of operational irregularities, beginning on January 30 when BitGrail owner Francesco Firano mandated Know Your Customer (KYC) verification for all users, citing regulatory pressures. Concurrently, the exchange halted all Nano deposits and withdrawals, forcing users to liquidate holdings into Bitcoin—the only cryptocurrency available for withdrawal. These restrictions triggered a 28% price drop in Nano from $18 to $12.89 within days, accompanied by user allegations of insolvency and demands for class action lawsuits on cryptocurrency forums.
The Nano Core development team subsequently issued a statement clarifying that the breach originated exclusively within BitGrail’s exchange systems, not the Nano protocol itself. Following the hack disclosure, Nano’s market price fell another 22% from $11.78 to $9.12, entering a sustained downtrend as investigations progressed. Firano publicly disputed the Nano Core team’s assessment via social media, maintaining the narrative of an external theft rather than exchange insolvency. User complaints intensified regarding withdrawal restrictions, particularly from non-European customers affected by the KYC policy changes implemented weeks prior to the breach announcement. No additional technical details regarding the attack vector or recovery efforts were disclosed by BitGrail in the immediate aftermath beyond the initial suspension of services and law enforcement involvement.