Leaderboard
691All-time rank
A
Altilly
Dec 26, 2020
$750K
Lost
$750K
Recovered
$0
Net loss
$750K
Unrecovered0% recovered
Attacker gained access to Altilly's hosting provider account via compromised API keys lacking 2FA. The attacker rebooted servers in rescue mode, created new system user accounts, deleted all backups across hosting and offsite services, and rendered encrypted wallets inaccessible.
The exchange permanently shut down with no fund recovery.
- Target
- CEX
- Classification
- Frontend & Infrastructure
- Technique
- API Key Compromised
- Attribution
- Unknown
- Chains
Multiple
Event timeline
- Dec 26, 2020Exploit executed — $750K drained via api key compromised
- Attributed to Unknown
- Recovery status Unrecovered 0%
