Atomic Wallet hack — June 2023
Incident facts
| Date of incident | |
|---|---|
| Target type | Wallet software or provider |
| Loss | $100,000,000Published estimates range $35,000,000 to $100,000,000Price at time of incident |
| Method | Other or undisclosedRoot cause never publicly disclosed; user keys compromised at scale |
| Chains | Multiple chains |
| Attributed to | North Korea (Lazarus Group)Suspected |
| Outcome | Unresolved |
What happened
Users of Atomic Wallet, a non-custodial wallet from an Estonian provider, began losing funds on 3 June 2023. Losses across more than 5,000 wallets eventually exceeded $100m.
This is one of the few large incidents where the mechanism was never established publicly. Atomic Wallet said fewer than 1% of users were affected and did not publish a technical account of how keys were compromised. Without a post-mortem, the vector is recorded here as undetermined rather than guessed at.
The loss distribution is worth noting for anyone using this incident as a data point: the average loss was about $2,800, but at least 164 wallets lost more than $100,000 and at least ten lost more than $1m. A registry threshold applied per victim would capture only a fraction of the total.
Early reporting put the figure near $35m before analysis raised it above $100m, and both bounds are recorded. Elliptic attributed the theft to North Korea's Lazarus Group and reported that the FBI subsequently agreed; because no government statement has been located directly, the attribution is recorded as suspected. A class action was filed against Atomic Wallet in the United States.
Sources
- EllipticSecondary · retrieved 2026-08-01
- DecryptSecondary · retrieved 2026-08-01
- BleepingComputerSecondary · retrieved 2026-08-01
Cite this
This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.
iTokenly Hack Registry, "Atomic Wallet hack — June 2023", iTokenly, accessed 2026-08-01, https://itokenly.com/hacks/atomic-wallethttps://itokenly.com/hacks/atomic-walletPermalinks never change. If an entry is renamed, the old address keeps working.
Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.