- Main event, leadership changes, market impact, financial shifts, or expert insights.
- ZachXBT exposes BitoPro exploit.
- User fund withdrawal issues reported post-breach.
ZachXBT, a well-known blockchain investigator, has reported that BitoPro’s hot wallets were exploited for $11.5 million on May 8, 2025, involving digital assets on several blockchains including Ethereum and Tron.
BitoPro Breach Details
BitoPro, a Taiwan-based exchange, suffered a breach in its hot wallets on May 8, 2025, leading to an $11.5 million loss. Unauthorized access spanned multiple blockchains, including Ethereum, Tron, and Solana.
The stolen assets were managed through various methods to cover the tracks of the perpetrators. They were resold on decentralized exchanges, routed through privacy protocols like Tornado Cash, and ultimately mixed using Wasabi Wallet’s Bitcoin service.
User Impact and Industry Response
Despite assurances from BitoPro about user funds being unaffected, users encountered difficulties withdrawing USDT. The breach, part of a troubling trend, happened amid an uptick in crypto thefts in 2025.
High-profile thefts have surged, with the Bybit hack in February marking a peak in Q1 2025 losses. According to PeckShield, crypto losses saw a substantial rise compared to the previous year, although May showed improvement over April.
Conclusion and Future Implications
The BitoPro incident underscores the necessity for enhanced transparency in future operations. The failure to promptly disclose the breach suggests potential risks in how exchanges handle security incidents and communicate with the public. By displaying diligence in reacting to such threats, the industry can foster a more resilient crypto trading environment.
“This incident raises significant concerns about exchange transparency and security practices, as BitoPro waited several weeks to acknowledge the breach publicly after it was exposed by an independent investigator.” — ZachXBT, Blockchain Investigator, Independent
