WOO X hack on 2025-07-24 ($14M reported)
Hack on Bitcoin, Ethereum, BNB Chain, Arbitrum, 24 Jul 2025. Reported loss $14M. Last verified 26 Oct 2026.
major
Reported loss
$14M
as reported by the sources
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
Bitcoin, Ethereum, BNB Chain, Arbitrum
Summary
Attackers who backdoored a WOO X developer's laptop through a fake open-source collaboration reached production systems and made $14 million in unauthorized withdrawals from nine user accounts on 2025-07-24 across Bitcoin, Ethereum, BNB Chain and Arbitrum. WOO X cited evidence pointing to the North Korean group UNC4899 and compensated the users from its treasury.
- Protocol
- WOO X
- Type
- Hack
- Reported loss
- $14,000,000 · as stated: $14 million source: woox.io ↗
Facts and where they come from
Primary sources
- WOO X: July 24th security incident post-mortem ↗ post-mortem · accessed 2026-10-26
- WOO X support: Temporary withdrawal suspension ↗ official announcement · accessed 2026-10-26
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-10-26.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram