Old Wallet, Big Loss: BitoPro Hit with $11.5M Crypto Theft

Crypto News Exploits

Old Wallet, Big Loss: BitoPro Hit with $11.5 Million Crypto Theft

Written by Aaron S.,

Editor-In-Chief

Last Updated: June 02, 2025

Key Takeaways

BitoPro lost $11.5 million in crypto on May 8 due to an exposed hot wallet during a system update;
The stolen funds were swapped on DEXs, then routed through Tornado Cash and THORChain;
BitoPro confirmed the breach on June 2 by saying user withdrawals and trading remain active.

Stop overpaying - start transferring money with Ogvio. Sign up, invite friends & grab Rewards now! 🎁

Old Wallet, Big Loss: BitoPro Hit with $11.5 Million Crypto Theft

BITDEGREE IN YOUR SOCIAL FEED

Cryptocurrency exchange BitoPro $36.27M has confirmed it lost over $11.5 million in crypto during a security breach on May 8.

The stolen funds were taken from the exchange’s online wallets, commonly used to handle day-to-day transactions across Ethereum ETH $3,027.75 , Solana SOL $133.31 , Tron TRX $0.2866 , and Polygon MATIC $0.1995 networks.

BitoPro made no public announcement at the time. On May 9, BitoPro briefly paused operations for maintenance, which was resolved within a few hours. However, users reported being unable to withdraw USDT USDT $1.00 .

How to Make Passive Money with NFT? (Explained!)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

It was not until June 2 that BitoPro publicly acknowledged the breach. In a message posted on Telegram, the company explained that the incident happened during an internal update to its wallet system. While moving funds around, an older hot wallet was left exposed, which gave the attacker a chance to access the assets.

Additionally, blockchain analyst ZachXBT reported on June 2 that the stolen tokens were moved to decentralized exchanges, where they were swapped. From there, the funds were either mixed through Tornado Cash or sent through THORChain RUNE $0.6517 to Bitcoin BTC $89,451.69 .

BitoPro has stated that its reserves are large enough to cover the loss and that users can continue to withdraw funds without restrictions. Trading services, deposits, and withdrawals have stayed online the whole time.

The company also mentioned that it has hired a blockchain security firm to track down the stolen funds.

On May 22, Cetus, a decentralized exchange (DEX), paused operations following a suspected $200 million exploit, with $63 million bridged to Ethereum. How did the attacker manage to pull it off? Read the full story.