Leaderboard
691All-time rank
A

Altilly

Dec 26, 2020

$750K
Lost
$750K
Recovered
$0
Net loss
$750K
Unrecovered0% recovered

Attacker gained access to Altilly's hosting provider account via compromised API keys lacking 2FA. The attacker rebooted servers in rescue mode, created new system user accounts, deleted all backups across hosting and offsite services, and rendered encrypted wallets inaccessible.

The exchange permanently shut down with no fund recovery.

Target
CEX
Classification
Frontend & Infrastructure
Technique
API Key Compromised
Attribution
Unknown
Chains
Multiple

Event timeline

  1. Dec 26, 2020
    Exploit executed — $750K drained via api key compromised
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents