$200 million worth of cryptocurrency goes missing from BitGrail exchange

2025-04-28 09:40:45admin

Another day, another high-profile cryptocurrency hack -- though in this case, the details are even murkier than usual.

Italian cryptocurrency exchange BitGrail announced last Thursday that it's missing 17 million Nano, a cryptocurrency worth $11.90 at the time the announcement was made. This means the total value of missing coins was around $202.3 million.

(The price of Nano has since dropped significantly; the coin is currently trading at about $10.15 according to CoinMarketCap).

SEE ALSO: We spoke to the vigilante hackers who stole $85 million in ether to save it

In a notice on its website, BitGrail mentions "unauthorized transactions," and says it has notified the authorities of the apparent hack. It also halted all withdrawals and deposits from the site.

On the surface, this seems to be just another cryptocurrency theft, the likes of which we've seen plenty of in recent years. Just last month, Japanese cryptocurrency exchange Coincheck said hackers had stolen $424 million worth of NEM coins from its reserves.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

The BitGrail hack is a bit more complicated. One day after the company's announcement, the team behind Nano posted an announcement of its own, in which they claim that Francesco "The Bomber" Firano has contacted them and asked them to modify Nano's ledger in order to cover the losses. But the Nano team claims there has been no technical issues with Nano's underlying ledger. "The problems appear to be related to BitGrail's software," the announcement said.

This is supported by a widely shared tweet by security researcher Tony Arcieri, who claims that BitGrail was hacked due to poorly implemented security. "The checks for whether you had a sufficient balance to withdraw were only implemented as client-side JavaScript," he wrote; this implies that a hacker could've modified the code locally in order to trick the exchange that he had more coins than he actually had (note that the source for this is an anonymous comment posted on social media, and it hasn't been verified as accurate).

This Tweet is currently unavailable. It might be loading or has been removed.

Furthermore, the Nano team said that there's "reason to believe that Firano has been misleading the Nano Core Team and the community regarding the solvency of the BitGrail exchange for a significant period of time."

Some reports on Twitter from BitGrail users confirm that something suspicious may have been going on on BitGrail for a while. According to some users, the exchange made it progressively harder for users to withdraw coins from the exchange, starting in December of last year.

This Tweet is currently unavailable. It might be loading or has been removed.

Firano fired back on Twitter, calling these accusations "unfounded," and said the BitGrail team will be pressing charges against the Nano team due to "irresponsible behavior."

This Tweet is currently unavailable. It might be loading or has been removed.

Regardless of the outcome, it's probably little comfort to people who've lost their funds. Shortly after its own hack, the Coincheck exchange announced it would restore all the stolen funds out of its own pocket; there has been no such announcement from BitGrail at this point.

Featured Video For You

Bye-bye, Bitcoin. It's all about bananacoins.