Hackers make off with $200M from Mixin crypto firm

Mixin, a prominent Hong Kong-based cryptocurrency firm, made a significant announcement on Sunday, revealing a security breach that led to the unauthorized extraction of approximately $200 million.

"In the early hours of September 23, 2023, Hong Kong time, Mixin Network's cloud service provider experienced a cyberattack, leading to the unfortunate loss of certain assets," the company communicated via X, formerly known as Twitter. "In response, we have temporarily halted deposit and withdrawal services on Mixin Network. These services will be reinstated once we have identified and resolved the vulnerabilities, following discussions and consensus among all nodes."

Mixin took swift action, enlisting the assistance of Google and crypto security experts from SlowMist to conduct a comprehensive investigation into the breach.

Mixin's core product is described as an "open and transparent decentralized ledger, collectively maintained by 35 mainnet nodes." In simpler terms, the Mixin Network operates as a decentralized exchange and cross-chain network, facilitating the seamless transfer of digital assets.

Our commitment is to "develop open-source software that prioritizes security, privacy, and decentralization," as stated on our website, where we proudly reported one million users as of July.

The precise method by which the hackers accessed the funds following their intrusion into Mixin's cloud database remains unclear, given that Mixin is designed to be decentralized in principle.

Melanie Lombardi, spokesperson for Google, confirmed Mandiant's involvement in the incident response. Mandiant is a renowned cyber incident response firm that Google acquired last year.

At the time of this statement, Mixin and SlowMist have not provided a response to our request for comments.

Furthermore, Mixin shared its intention to unveil a forthcoming "solution" to address the situation and recover the stolen assets.

This incident marks the most substantial cryptocurrency theft of 2023, according to data compiled by Rekt, an organization that tracks security breaches in the cryptocurrency sector. The previous record was held by Euler, a cryptocurrency lending platform, which suffered an attack resulting in the loss of approximately $197 million in March.