Mixin Network hack — September 2023
Incident facts
| Date of incident | |
|---|---|
| Target type | Infrastructure provider |
| Loss | $200,000,000Published estimates range $142,000,000 to $200,000,000Price at time of incident |
| Method | Infrastructure compromiseCloud database provider compromised, exposing the network's hot wallets |
| Chains | Multiple chains |
| Outcome | Unresolved |
What happened
Mixin Network, a cross-chain transfer network, lost around $200m on 23 September 2023.
Nothing in Mixin's own contracts was exploited. The database of the cloud provider Mixin depended on was compromised, and that access was enough to reach the network's hot wallets. It is a reminder that a system described as decentralised can still have a single operational dependency that decides its security.
Reported figures do not fully agree. The headline number circulated at the time was $200m, while the itemised composition published alongside it — about $95.3m in ETH, $23.7m in BTC and $23.6m in USDT — totals closer to $143m. Both bounds are recorded here rather than picking one.
Deposits and withdrawals were suspended, and Mixin engaged SlowMist and Google to investigate. The founder announced a plan to refund half of user assets initially, with the remainder tied to future recovery. No attribution has been established publicly.
Sources
- EllipticSecondary · retrieved 2026-08-01
- TechCrunchSecondary · retrieved 2026-08-01
- BleepingComputerSecondary · retrieved 2026-08-01
Cite this
This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.
iTokenly Hack Registry, "Mixin Network hack — September 2023", iTokenly, accessed 2026-08-01, https://itokenly.com/hacks/mixin-networkhttps://itokenly.com/hacks/mixin-networkPermalinks never change. If an entry is renamed, the old address keeps working.
Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.