Jul 2025 - BigONE Control Logic Changed To Withdraw Customer Funds - $27m (Global)
BigONE Exchange is a comprehensive cryptocurrency trading platform that offers a wide range of financial products and services designed to support users at all stages of their crypto journey. Users can access spot and margin trading on over 500 cryptocurrencies, as well as futures contracts with up to 100x leverage. BigONE also provides a zero-fee conversion service for seamless trading across all pairs. The platform focuses on user convenience and aims to empower investors by offering easy-to-use tools for both beginners and experienced traders.
The platform’s financial suite, BigONE Earn, includes structured investment products such as dual investment strategies, capital-guaranteed products, and options to buy discounted crypto assets. These are designed to maximize yields while managing risk, offering users stable returns with flexible investment strategies. BigONE emphasizes secure and efficient investing, providing users with a robust system to navigate the fast-paced crypto market with confidence.
Beyond trading, BigONE fosters community engagement and education through its customer support, global investor community, and BigONEpedia, a knowledge hub with expert insights into the crypto industry. The BigONE mobile app enhances accessibility, allowing users to manage their investments and stay informed on the go. With security features like penetration testing, bug bounty programs, and proof of funds verification, BigONE positions itself as a secure, user-focused platform for crypto wealth building.
"The production network was compromised, and the operating logic of account and risk control related servers was modified, enabling the attacker to withdraw funds. Notably, the private keys were not leaked."
Hacker addresses:
Ethereum & BSC0x9Bf7a4dDcA405929dba1FBB136F764F5892A8a7a
Solana: HSr1FNv266zCnVtUdZhfYrhgWx1a4LNEpMPDymQzPg4R
Bitcoin: bc1qwxm53zya6cuflxhcxy84t4c4wrmgrwqzd07jxm
Tron: TKKGH8bwmEEvyp3QkzDCbK61EwCHXdo17c
BTC 120
ETH 350
USDT(TRC20) 6,974,358
USDT(ERC20) 1,395,000
USDT(BSC) 38,106.95
USDT(SOL) 134,764
XIN 20,730
SNT 4,369,581
WBTC 1
CELR 15,772,006
LEO 16,071
UNI 25,487
SHIB 9,697,050,027
SOL 1,800
DOGE 538,000
The exchange publicly acknowledged the theft and has stated they will be covering all related losses.
BigONE engaged SlowMist to assist with security, who also publicly reported on the situation.
The platform has offered to cover all assets of affected users.
Assets are currently being tracked down. The platform has promised that withdrawals will be reopened after a security check is completed.
Further Analysis
BigONE Exchange is a full-featured cryptocurrency trading platform offering spot, margin, and futures trading, alongside structured investment products through its BigONE Earn suite. With a focus on user convenience, security, and education, it provides tools for both novice and experienced traders. Despite its robust infrastructure, BigONE recently suffered a security breach that compromised its production network and allowed unauthorized fund withdrawals—though private keys were not leaked. The exchange has acknowledged the incident, pledged to cover all user losses, and is working with blockchain security firm SlowMist to investigate and enhance system security. Withdrawals will resume following a full security review.
How Could This Have Been Prevented?
More Cryptocurrency Exchange Hacks/Scams/Frauds
VDS V-Dimension BEP20 Smart Contract Business Logic Flaw > > < < Arcadia Finance Rebalancer swapData Delegated Power Abuse
Sources/Further Reading
SlowMist - "The exchange @BigONEexchange was exploited due to a supply chain attack and loss exceeds $27 million. The production network was compromised, and the operating logic of account and risk control related servers was modified, enabling the attacker to withdraw funds. Notably, the private keys were not leaked." - Twitter/X (Dec 31)
BigONE Security Incident Disclosure and Progress Update – July 16 - BigONE (Dec 31)
Bitcoin Theft Address - BlockChain.com (Dec 31)
Ethereum Theft Transaction - Etherscan (Dec 31)
BigONE Homepage (Dec 31)
Rekt - BTCTurk - Rekt (Dec 31)
 t.me/QuadrigaInitiative
|
 /r/QuadrigaInitiative
|
 @QuadrigaInit
|
 info@quadrigainitiative.com
|