BigONE Loses $27 Million in Hack Amid Accusations of Hosting Scam Activity

Crypto exchange BigONE has been hacked, but not everyone is sympathetic about the incident as the platform is reportedly linked to illegal activities.

Nevertheless, the incident adds to the list of attacks in the crypto market, highlighting the need for caution and enhanced security.

BigONE Hacked for $27 Million, ZachXBT Alleges Scam Ties

Sponsored

Crypto exchange BigONE has been hacked, with over $27 million in digital assets stolen and swapped into Bitcoin (BTC), Ethereum (ETH), TRON (TRX), and Solana (SOL), according to on-chain tracker Lookonchain.

The hacker’s wallets currently hold 120 BTC ($14.15 million), 23.3 million TRX ($7 million), 1,272 ETH ($4 million), and 2,625 SOL ($428,000).

The #BigONE exchange was hacked and lost over $27M.

Currently, the hacker has exchanged the stolen assets for 120 $BTC($14.15M), 23.316M $TRX($7.01M), 1,272 $ETH($4M) and 2,625 $SOL($428K).

Address:
bc1qwxm53zya6cuflxhcxy84t4c4wrmgrwqzd07jxm
TCAfB8jHbJ56xwmfwKwWEs8HLRjbC2GfHG… pic.twitter.com/RXfSb7jgt0

— Lookonchain (@lookonchain) July 16, 2025

In the minutes leading up to this confirmation, the security team from Certik Alerts flagged large token outflows from BigONE.

According to the team, the bad actor now holds approximately $4 million worth of ETH as of two hours ago.

#CertiKInsight 🚨

We have seen multiple large token outflows from 0xd4dcd2459bb78d7a645aa7e196857d421b10d93f that are related to the latest BigONE security incident.

The exploiter now holds ~$4M in ETH and multiple other tokens (may not be liquidatable ) at… pic.twitter.com/qWM0rFfNbB

— CertiK Alert (@CertiKAlert) July 16, 2025

Sponsored

Blockchain security firm SlowMist confirmed the incident, citing a supply chain attack on the exchange.

Based on the report, the attacker manipulated the logic of servers related to account and risk control in the production network to execute unauthorized withdrawals.

According to SlowMist, no private keys were leaked, with security firms identifying the attacker’s address, as follows:

• Ethereum & BSC：0x9Bf7a4dDcA405929dba1FBB136F764F5892A8a7a
• Solana: HSr1FNv266zCnVtUdZhfYrhgWx1a4LNEpMPDymQzPg4R
• Bitcoin: bc1qwxm53zya6cuflxhcxy84t4c4wrmgrwqzd07jxm
• Tron: TKKGH8bwmEEvyp3QkzDCbK61EwCHXdo17c

Sponsored

While the incident marks another high-profile centralized exchange exploit, it has also stirred controversy.

Renowned blockchain investigator ZachXBT claimed BigONE previously processed significant volume tied to pig butchering, romance, and investment scams.

“I do not feel bad for the team as this CEX processed a good bit of volume from pig butchering, romance, investment scams,” the blockchain sleuth stated.

The hack adds to a growing wave of exchange security breaches after the landmark attack against Bybit, and most recently, Nobitex, raising new questions about platform integrity.

BigONE to Cover All Losses

Sponsored

Investigators continue to track the stolen assets as the attacker attempts to move them across chains and exchanges.

According to the exchange, the attacker targeted their hot wallet, but all user assets are reportedly safe.

Sponsored

Meanwhile, BigONE has committed to bearing all the losses from its own reserves, but has halted all trading and deposits for the time being.

⚠️ Security Incident: unauthorized access to our hot wallet

All user assets are safe. BigONE will fully bear all the losses. Trading and deposits will resume soon; withdrawals after added security upgrades.

🔗 https://t.co/CWCrng2KK8

— BigONE (@BigONEexchange) July 16, 2025

The exchange also said all investigation progress and handling results will be communicated with full transparency and regular updates.