Bitopro Exchange Hack Update: Is $11M Theft Deeper Than Reported?

BitoPro Exchange Hack: Was It Just “Maintenance” or a $11M Cover-Up?

Something strange happened on May 8, 2025. BitoPro, Taiwan's top crypto platform, unexpectedly entered "maintenance mode." No warning. No alert. Just silence. 

But behind that silence came something far more serious—what researchers are now calling the Bitopro exchange hack. According to Wu Blockchain data, over $11.5 million vanished from the exchange’s hot wallets in one coordinated strike. 

Source: Wu Blockchain Data

Users were left in the dark for weeks. What really happened? Why did the exchange take almost three weeks to confirm the attack?

Let’s break it all down.

Mysterious Outflows Spark Questions on BitoPro Hack

On May 8, 2025, this Taiwan-based crypto exchange quietly paused operations, telling users it was undergoing “maintenance.” According to crypto investigator ZachXBT, the platform was likely breached—losing over $11.5 million in a silent attack on its hot wallets.

Hot wallets tied to Ethereum, Tron, Solana, Polygon, and other chains were emptied. The attacker didn’t stop there. They sold the stolen assets via decentralized marketplaces and quickly laundered the funds through Tornado Cash and Thorchain, eventually depositing some into Wasabi wallets to mask their trail.

Source: ZachXBT X Account

This incident is one of the most shocking in the list of latest BitoPro hack news, especially as the Taiwan crypto exchange hack wasn’t disclosed on time.

ZachXBT Reveals Exploit, Wallet Addresses Exposed

ZachXBT investigation revealed a troubling pattern. The stolen funds were traced back to key wallet addresses, confirming a deep-level BitoPro hot wallet exploit. 

The team behind the investigation believes the attacker was familiar with its internal flows, making the $11M breach more than just a lucky breach.

The following addresses were tied to the stolen assets:

• 0x2453933c98b6e55397103f7c1081626e0a02d2c9

• 0x454cf3892a949c94569ab2663090ecdca811a6f0

• TRoLEoNiiod5m8TSdmSR4iW17yQCfc2YJV

• bc1qcwzxklr3tr7zjhvql7pqtg57rkvm55vcz8ydul

Official Confirmation Comes… Three Weeks Later

It wasn’t until June 2—three weeks after the event—that the platform finally broke its silence. In a short Telegram statement, the team admitted that the system maintenance story wasn’t the full picture; an old hot wallet was compromised during a wallet system upgrade. While shifting funds internally, the attacker struck.

Source: Telegram

The platform claimed the hack was quickly stopped. Assets were moved to a new wallet, and a third-party blockchain security firm was hired to trace the attacker.

A Pattern of Silence? Users Demand Transparency

The fact that this exchange hacked news broke through an independent investigator rather than the platform itself raised alarm bells. Many in the community believe the main problem is not just the hack but also the length of time the platform required to reveal the truth following the BitoPro May 8 exploit. 

Similar concerns were raised after the Cetus Protocol hack, a decentralized hub, was exploited for $220 million just two weeks later. These consecutive events highlight how far the crypto market still has to go in terms of safeguarding money and user confidence.

Conclusion

The Bitopro exchange hack isn't just a story about the $11 million loss; it's about when the platform failed its users, at a time when it was most critical. They ceased to speak, labeled it "maintenance," and then admitted the hack weeks later. For a crypto industry trying to make mainstream, this is a wake up call that instead of silences, its transparency that keeps users loyal.