ShareTweetWhatsAppPinShareEmail0 Share
Forget masked robbers, getaway cars, and elaborate bank vaults. Some of the biggest heists of the modern era required nothing more than a few laptops, stolen credentials, sophisticated code, and an understanding of the systems storing billions of dollars in digital assets.
Cryptocurrency has given rise to a new breed of criminal narrative. Hackers have stolen entire fortunes without ever setting foot in the same country as their victims, negotiated the return of hundreds of millions of dollars via blockchain messages, worked for hostile governments, and even watched as their victims hacked their systems in retaliation. In some cases, the theft itself was just the beginning.
Here are ten cryptocurrency heists that look like they came straight out of a Hollywood movie.
See also: 10 Major Things Cryptocurrency Was Supposed to Change, and What Actually Happened
10. Collapse of Mount Gox
Mt. Gox: Solving the Mystery of Bitcoin's Biggest Crash. Fortune
Before cryptocurrency exchanges became a multi-billion dollar industry, Mt. Gox dominated Bitcoin trading. At its peak, the Tokyo-based exchange handled approximately 701,000,000 of the global Bitcoin trading volume, becoming the place where thousands of early investors stored and traded their cryptocurrency.
Then the bitcoins started disappearing.
Security breaches plagued Mt. Gox for years, but users didn't realize the scale of the problem until February 2014, when the exchange suddenly suspended withdrawals. Soon after, Mt. Gox announced the disappearance of hundreds of thousands of bitcoins belonging to customers and the company and filed for bankruptcy. At the time, the losses amounted to hundreds of millions of dollars.
The company initially attributed the problems to Bitcoin's vulnerability to transaction modification. However, later research showed that such attacks could only account for a tiny fraction of the missing funds. Whatever happened, it appears the coins disappeared from Mt. Gox over a much longer period of time.
Then came another unexpected twist: approximately 200,000 bitcoins were later discovered in an old digital wallet. This ultimately became part of an extremely complex bankruptcy and rehabilitation process, as former clients fought to recover at least part of what they had lost.
The story lasted much longer than the exchange itself. In July 2024, more than a decade after the collapse of Mt. Gox, creditors finally began receiving payments in Bitcoin and Bitcoin Cash. For some victims, one of the first major cryptocurrency heists took ten years to reach its conclusion.[1]
9. Bitfinex Bitcoin Heist
Married couple stole $4.5 billion in Bitcoin heist [Bitfinex]
When nearly 120,000 bitcoins disappeared from the Bitfinex cryptocurrency exchange in August 2016, it seemed the thief had vanished with them. At the time, the stolen cryptocurrency was worth approximately $71 million. However, as the price of bitcoin skyrocketed in the following years, the untouched fortune grew into billions.
The mystery was finally solved in February 2022, when federal investigators arrested New York City couple Ilya Lichtenstein and Heather Morgan. Morgan immediately gained attention for creating an online persona as an eccentric rapper under the moniker "Razzlekhan," with surreal music videos and, by her own description, entrepreneurial ambitions.
But after their arrest, the story took a much stranger turn. Lichtenstein eventually admitted that it was he, not some as-yet-unidentified hacker, who personally hacked Bitfinex. According to the Department of Justice, he fraudulently authorized over 2,000 transactions that resulted in exactly 119,754 bitcoins being transferred to a wallet he controlled. He later enlisted Morgan to launder the money.
The couple used false identities, darknet markets, cryptocurrency mixers, cryptocurrency interception, and other methods to conceal the stolen funds. They even converted part of the proceeds into gold coins, which Morgan helped hide by burying them.
Ultimately, authorities succeeded in recovering billions of dollars in stolen cryptocurrency. Lichtenstein pleaded guilty and was sentenced to five years in federal prison in November 2024.
A hacker steals a fortune, waits until it's worth billions, recruits his wife, an aspiring rapper, to help launder the money, and ends up burying the gold along the way. Hollywood would probably be accused of making this story too outlandish.[2]
8. Hacking the Ronin Network
The largest cryptocurrency hack in history saw $600 million stolen from Axie Infinity's Ronin blockchain.
In March 2022, someone committed a major theft from the Ronin Network, the blockchain infrastructure used by the popular online game Axie Infinity . The attackers stole 173,600 ETH and 25.5 million USDC from Ronin Bridge, with the value of the stolen cryptocurrency at the time being approximately $620 million.
The Ronin Bridge existed to allow users to transfer digital assets between different blockchains. Attackers compromised a large enough portion of the system's validators to approve fraudulent withdrawals, turning the mechanism intended to connect blockchain economies into a backdoor for one of the largest cryptocurrency thefts in history.
What transformed this hack from a large-scale cybercrime into an international security story was the identity of the perpetrators. The FBI officially attributed the theft to Lazarus Group and APT38, hacker organizations linked to the North Korean government. US authorities have repeatedly warned that North Korea uses cryptocurrency theft and other cybercrimes to generate revenue for the regime.
In other words, players buying and trading fantastical creatures within the online game have unwittingly become part of a financial system valuable enough to attract state-sponsored hackers.
Ronin later compensated affected users and rebuilt its bridge, adding additional security measures. But the underlying image remains hard to improve: North Korean cybercriminals are stealing hundreds of millions of real-world dollars from the economy linked to a game about cartoon monsters.[3]
7. Poly Network Vulnerability
$600 Million Cryptocurrency Hack – POLYNETWORK Exploit!
On August 10, 2021, an anonymous hacker exploited a vulnerability in the Poly Network, a platform that allows users to transfer cryptocurrency between different blockchains. By the time the attack was complete, over $610 million in digital assets had disappeared.
Then the thief spoke.
Because messages can be embedded in blockchain transactions, the hacker began publicly explaining the attack, claiming the theft was carried out "for fun" and to expose Poly Network's weaknesses. Proving whether this was truly the plan from the start was impossible. Laundering over half a billion dollars in cryptocurrency with public traceability also became extremely difficult.
Within days, the hacker began returning the money. Poly Network responded equally bizarrely, calling the thief "Mr. White Hat" and thanking him for discovering the security vulnerabilities. The company even offered a $500,000 reward for finding the vulnerability once the stolen assets were returned.
In the end, almost all of the refundable funds were returned.
Many heist stories feature thieves who change their minds and return the loot. Few stories feature those who steal over $600 million, publicly communicate with the victim, return the money, and then receive half a million dollars for tipping off the heist.[4]
6. Coincheck Hack
The Hackers Who Stole $523,000,000 and Gone (For Now)
In January 2018, Japanese cryptocurrency exchange Coincheck discovered that hackers had siphoned off approximately 58 billion yen (approximately $530 million at the time) in the NEM cryptocurrency from the platform.
The stolen coins were stored in a "hot wallet," meaning a wallet that was constantly connected to the internet rather than offline. The massive losses immediately drew attention to the security measures of cryptocurrency exchanges, and Japan's Financial Services Agency ordered Coincheck to improve its operations and increased its monitoring of other exchanges.
Coincheck's response was almost as astonishing as the theft itself. Instead of simply informing customers of the loss of their cryptocurrency, the company announced it would compensate approximately 260,000 affected users from its own funds. The total compensation amounted to approximately 46 billion yen, or over $400 million.
Meanwhile, attempts were made to track the stolen NEM as it moved through the cryptocurrency ecosystem. Unlike a suitcase full of cash, hundreds of millions of dollars in blockchain assets leave a public trail—even when no one knows who controls the wallets at the end of that trail.
Coincheck survived, compensated its clients, tightened controls, and later resumed operations under new management. The hackers disappeared with a massive haul, but the stricken exchange somehow survived a theft that would have destroyed almost any traditional financial business.[5]
5. Hack the wormhole bridge
$320 Million Cryptocurrency Wormhole Hack - Reverse Engineering.
On February 2, 2022, an attacker discovered a vulnerability in Wormhole, a bridge that allows cryptocurrency to move between blockchains like Solana and Ethereum. By exploiting the vulnerability in the bridge's verification process, the hacker created 120,000 unbacked wrapped ethers and stole cryptocurrency worth approximately $320 million at the time.
In response, Wormhole's sponsor, Jump Crypto, purchased 120,000 ETH on the open market and replenished the missing assets, thereby restoring support for the bridge. The hacker, however, retained the stolen cryptocurrency and later began using some of it in decentralized finance protocols, rather than simply leaving the wealth untouched.
Then, about a year after the initial theft, the story took an unexpected turn. Some of the hacker's assets were stored in vaults managed through the Oasis platform. After white hat hackers discovered a way to access these vaults, the High Court of England and Wales ordered Oasis to exploit the vulnerability to recover the funds.
Oasis complied, effectively disabling its own software and seizing approximately $140 million worth of cryptocurrency from positions linked to the Wormhole hacker, before returning the assets to an authorized third party.
A thief using a wormhole successfully hacked one of the world's largest cryptocurrency bridges. A year later, the victim essentially retaliated in kind.[6]
4. BSC Token Hub Exploit
BINANCE HACK UPDATE! DO NOT USE THE EXCHANGE UNTIL YOU SEE *THIS*! WHY WAS BINANCE EXPLOITED?
In October 2022, a hacker attacked the BSC Token Hub, a bridge connecting the BNB Beacon Chain and the BNB Smart Chain. Instead of stealing cryptocurrency already owned by customers, the hacker exploited a vulnerability in the bridge's authentication system to create approximately two million new BNB, worth nearly $570 million.
The attacker quickly moved some of the newly minted assets to other blockchains. BNB Chain faced a difficult choice: allow transfers to continue while validators followed normal operations, or coordinate an emergency shutdown.
They chose the second option.
BNB Smart Chain validators contacted each other and synchronized a temporary pause, preventing the majority of the fraudulent BNB from leaking. BNB Chain later estimated that over $100 million remained unrecovered. Meanwhile, most of the newly created assets remained under control. The blockchain itself was not deactivated, and BNB Chain stated that ordinary users were not directly affected.
The measures taken prevented an even larger theft, but raised an awkward philosophical question. Blockchain, marketed as decentralized, has just demonstrated that in a serious emergency, a relatively small group of validators can coordinate their actions to stop it.
The attacker created hundreds of millions of dollars out of thin air. Defenders responded by suggesting that blockchains weren't designed for that: they put him on hold.[7]
3. KuCoin Hack
KuCoin's official account has been hacked! [Crypto Espresso 04/24/23]
In September 2020, the KuCoin cryptocurrency exchange detected anomalous withdrawals from several of its hot wallets. By the time it became clear what had happened, hackers had stolen approximately $285 million in 154 different cryptocurrencies and tokens.
KuCoin later stated that the attackers had spent significant time in its systems, ultimately obtaining private keys to several hot wallets and bypassing security measures. The company immediately replaced the compromised wallets and began collaborating with exchanges, blockchain projects, security companies, and law enforcement agencies to trace the stolen assets.
Subsequent events revealed something unusual about the cryptocurrency theft.
Some token issuers and blockchain projects were able to freeze, restore, or replace stolen assets, preventing hackers from freely withdrawing all the stolen funds. Ultimately, KuCoin reported recovering approximately $222 million, or $78%, thanks to cooperation with exchanges and cryptocurrency projects, and another $17.45 million, or $6%, thanks to the efforts of law enforcement and security agencies. KuCoin and its insurance fund covered the remaining losses, so customers were not affected.
In total, approximately 841,000,000 stolen assets were recovered thanks to cooperation with external organizations. The thieves successfully stole hundreds of millions of dollars, but discovered that some of their digital loot may have been frozen or replaced by the organizations behind it.
It was a robbery in which the stolen money itself might suddenly stop cooperating with the thieves.[8]
2. The Baybit Robbery
How North Korean hackers stole $1.5 billion worth of cryptocurrency — BBC World Service
On February 21, 2025, Bybit employees prepared a seemingly routine transfer of funds from an Ethereum cold wallet to a warm wallet. Several authorized individuals reviewed the transaction through the Safe{Wallet} interface and approved it.
What they saw did not match what they signed.
A forensic investigation conducted by cybersecurity firm Sygnia in 2026 revealed that the attackers spent nearly three weeks preparing the operation. They first hacked the Safe{Wallet} developer's computer using social engineering, gained access to the cloud infrastructure, and ultimately injected malicious JavaScript into the wallet's web interface.
When Bybit employees verified the transfer, the screen displayed seemingly legitimate transaction details. However, behind the scenes, malicious code had altered what was actually being signed. As a result, the transaction gave the attackers control of the cold wallet.
Within minutes, approximately $1.5 billion in Ethereum assets disappeared. Sygnia attributed the operation to the Lazarus group, a hacker organization linked to the North Korean government, making this attack both the largest documented case of cryptocurrency theft and yet another example of the intersection of cybercrime and geopolitics.
The attackers quickly removed the malicious code, attempting to erase the evidence indicating how they had done it. Meanwhile, Bybit continued accepting payments, attempting to ensure sufficient liquidity to reassure clients and cover losses.
There were no drills, explosives, or getaway cars. The employees simply glanced at one transaction, unknowingly signed another, and watched as $1.5 billion disappeared.[9]
1. DAO Exploit
The DAO Hack: The Story of Ethereum Classic
In 2016, Ethereum was still young when one of its most ambitious projects promised to demonstrate what a decentralized financial system could become. The DAO was essentially a venture capital fund, controlled by investors and built entirely on smart contracts. Investors poured approximately $150 million in Ether into it.
Then someone discovered a bug in the code.
The attacker exploited a recursive call vulnerability that allowed multiple Ether withdrawals before the smart contract correctly updated the account balance. Over 3.6 million ETH were transferred to a separate "child DAO." Ethereum itself wasn't hacked; the vulnerable application running on it was.
However, there was one significant complication. The DAO's rules prevented the attacker from immediately withdrawing the stolen ether, giving the Ethereum community several weeks to make a decision.
This decision sparked a philosophical crisis. Blockchains were supposed to be immutable. If the code executed exactly as written—even catastrophically—should anyone intervene?
Ethereum holders voted for a controversial hard fork designed to recover assets. Over 85% votes supported the intervention. At block 1,920,000, the fork implemented an irregular state change that transferred the balances of the affected DAOs to a recovery contract so that investors could recover their Ether. It did not erase previous blocks or simply reverse the problematic transactions.
Not everyone agreed. Some miners and users refused to accept the fork and continued using the original chain. Their blockchain became Ethereum Classic, while the forked version retained the Ethereum name.
Most heists leave behind police reports, court cases, and missing money. The DAO exploit left behind two blockchains.[10]
More great lists
10 performances straight out of a horror movie
10 ironic news items that seem straight out of an Alanis video…
10 Amazing Facts About Elevators That Will Help You Understand…
Ten celebrities who outright lied during their home inspections.
10 Strange and Heartbreaking Stories Straight from…
10 Hollywood Celebrities Allegedly Linked to the Mafia
10 Weird Hollywood Urban Legends You Might Have Missed
10 Stories About the Occult in Hollywood
10 Hollywood Stars Who Gave Up Cell Phones
Fact checked by Darci Heikkinen ShareTweetWhatsAppPinShareEmail0 reposts