 {"id":3839,"date":"2024-07-25T07:51:51","date_gmt":"2024-07-25T07:51:51","guid":{"rendered":"https:\/\/1finance.co.in\/magazine\/?post_type=blog&#038;p=3839"},"modified":"2026-02-11T17:43:51","modified_gmt":"2026-02-11T12:13:51","slug":"the-wazirx-hack-a-detailed-account-and-response-measures","status":"publish","type":"blog","link":"https:\/\/1finance.co.in\/1f-dashboard\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/","title":{"rendered":"The WazirX Hack: A Detailed Account and Response Measures"},"content":{"rendered":"<p><span>On July 18, 2024, the Indian crypto exchange WazirX faced one of the most significant security breaches in the history of the digital asset market. The attack resulted in the theft of around $235 million in digital assets, accounting for approximately 46% of the exchange\u2019s reserves. This blog explores the timeline of events, the immediate and ongoing responses by WazirX, and the measures taken to enhance security and recover the stolen assets.<\/span><\/p>\n<h2><span>The Cyberattack and Immediate Response<\/span><\/h2>\n<h2>July 18, 2024: The Cyberattack Occurs<\/h2>\n<p><span>The hackers gained access to 3 out of 5 signatures needed to authorise transactions from WazirX&#8217;s Ethereum multi-signature wallet. This gave them access to WazirX\u2019s ERC-20 tokens, which they quickly transferred to their wallet, leading to a massive loss of digital assets. The exchange promptly informed users about the breach and its potential impact.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Legal and Regulatory Actions:<\/b><span> An online police complaint was filed with the National Cyber Crime Reporting Portal, and a physical complaint was processed. Notifications were sent to the Financial Intelligence Unit (FIU) India and the Computer Emergency Response Team (CERT-In).<\/span><\/li>\n<li aria-level=\"1\"><b>Investigative Measures:<\/b><span> An investigation was launched to track the stolen assets. Multiple exchanges were contacted to block the identified wallet addresses, and over 500 exchanges were reached out to.<\/span><\/li>\n<li aria-level=\"1\"><b>Community Engagement:<\/b><span> Preliminary findings were shared with the community, and deposits and withdrawals were temporarily paused to prevent further losses.<\/span><\/li>\n<\/ul>\n<h2><span>The Hunt for the Hacker<\/span><\/h2>\n<h2>ZachXBT Claims Initial Bounty<\/h2>\n<p><span>Arkham Intelligence offered an initial bounty of 5,000 ARKM (~$8,000) for information related to the hack. Crypto sleuth ZachXBT claimed this bounty by providing evidence linking the hacker to a KYC-verified deposit address used to receive funds from the WazirX exploiter.<\/span><\/p>\n<h2>July 18 &amp; 19, 2024: Holdings and Transfers<\/h2>\n<ul>\n<li aria-level=\"1\"><b>ETH Holdings:<\/b><span> The explorer&#8217;s total $ETH holding rose to 59,097 $ETH ($201 million).<\/span><\/li>\n<li aria-level=\"1\"><b>Asset Dumping:<\/b><span> 15,298 $ETH ($52 million) was stolen directly, and 43,799 $ETH ($149 million) was acquired by dumping various assets, including:<\/span>\n<ul>\n<li aria-level=\"2\"><span>5.43 trillion $SHIB ($90.2 million)<\/span><\/li>\n<li aria-level=\"2\"><span>20.5 million $MATIC ($10.2 million)<\/span><\/li>\n<li aria-level=\"2\"><span>640.27 billion $PEPE ($7.48 million)<\/span><\/li>\n<li aria-level=\"2\"><span>$5.7 million USDT<\/span><\/li>\n<li aria-level=\"2\"><span>Around $12 million in altcoins such as $CHR, $CELR, $OOKI, and $FRONT.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2><span>Continued Efforts and Bounty Program<\/span><\/h2>\n<h2>July 20, 2024: Continued Coordination<\/h2>\n<p><span>WazirX continued to collaborate with exchanges and law enforcement agencies. Users were advised to refrain from trading on the platform during this critical period.<\/span><\/p>\n<h2>July 21, 2024: Bounty Program Launched<\/h2>\n<p><span>To incentivise the recovery of stolen assets, WazirX announced a bounty program offering up to $23 million for actionable intelligence. Rewards of up to $10,000 worth of USDT were offered for information leading to the freezing and recovery of the stolen funds. Trading activities were temporarily paused to conduct a thorough security audit and forensic analysis.<\/span><\/p>\n<h2><span>Ongoing Efforts and Security Measures<\/span><\/h2>\n<h2>Audit and Security Measures<\/h2>\n<ul>\n<li aria-level=\"1\"><b>Cybersecurity Experts:<\/b><span> WazirX engaged with top cybersecurity experts to assist in investigation and recovery efforts.<\/span><\/li>\n<li aria-level=\"1\"><b>Forensic Analysis:<\/b><span> Comprehensive forensic analysis and security audits are being conducted to understand the full impact and develop recovery strategies.<\/span><\/li>\n<\/ul>\n<h2>Community and Exchange Collaboration<\/h2>\n<p><span>The global crypto community, including white hat hackers and blockchain forensics experts, supported WazirX in its recovery efforts. Despite the attackers using mixing services like Tornado Cash, significant portions of the stolen funds remain in the hacker&#8217;s wallet, offering hope for recovery.<\/span><\/p>\n<h2><span>Recent Developments and Next Steps<\/span><\/h2>\n<h2>Enabling Withdrawals<\/h2>\n<p><span>WazirX is actively working to enable fund withdrawals for affected users while ensuring that adequate security measures are in place to prevent future breaches.<\/span><\/p>\n<h2>Regular Updates<\/h2>\n<p><span>WazirX is committed to providing regular updates to the community, keeping them informed about the progress of recovery efforts and any new developments.<\/span><\/p>\n<h2><span>Important Information for Investors<\/span><\/h2>\n<ul>\n<li aria-level=\"1\"><b>Affected Ethereum Wallet Address:<\/b><span> 0x27fD43BABfbe83a81d14665b1a6fB8030A60C9b4.<\/span><\/li>\n<li aria-level=\"1\"><b>Force Majeure Statement:<\/b><span> WazirX emphasises that this incident is beyond its control but reassures its commitment to recovering the stolen funds and collaborating with the best resources and experts.<\/span><\/li>\n<\/ul>\n<h2><span>For Investors: Withdrawal Guidelines<\/span><\/h2>\n<ol>\n<li aria-level=\"1\"><b>Token Holdings Check:<\/b><span> Verify if your token holdings were among those hacked, such as ETH, USDT, SHIB, etc. If not, your holdings might be safe.<\/span><\/li>\n<li aria-level=\"1\"><b>INR Withdrawal:<\/b><span> Withdrawals could be allowed in the near future but with some caps in place to ensure fair distribution and keep the business running. These limits could be a fixed amount per user or a percentage of your total INR holdings.<\/span><\/li>\n<li aria-level=\"1\"><b>Crypto Withdrawal:<\/b><span> Things are a bit more uncertain here. If withdrawals are reopened, WazirX will likely impose daily or monthly withdrawal limits, at least for a while, to prevent a massive outflow of funds.<\/span><\/li>\n<li aria-level=\"1\"><b>Raising Funds from Investors:<\/b><span> Another possibility is that WazirX might follow in the footsteps of the DMM Bitcoin exchange in Japan. They could raise funds from investors to compensate users for their losses and keep the exchange afloat. They might set a cut-off date to determine the market value of your holdings and return funds in fiat currency, like INR.<\/span><\/li>\n<\/ol>\n<p><span>The WazirX hack incident underscores the importance of robust security measures in the digital asset space. WazirX remains committed to recovering the stolen funds and ensuring the safety and trust of its users. As the investigation and recovery efforts continue, the exchange will keep its community informed and take all necessary steps to enhance its security infrastructure.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On July 18, 2024, the Indian crypto exchange WazirX faced one of the most significant security breaches in the history of the digital asset market. The attack resulted in the theft of around $235 million in digital assets, accounting for approximately 46% of the exchange\u2019s reserves. This blog explores the timeline of events, the immediate [&hellip;]<\/p>\n","protected":false},"featured_media":3840,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_updated_date":"","_blog_featured_landing":false},"blog-category":[278],"acf":{"alt_text":"","include_in_calculator_page":[],"hash_tags":"","spotify-id":"","show_audio_player":false,"audio_title":"","audio_link":"","key_takeaway":"","article_sources":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.11 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>The WazirX Hack: A Detailed Account and Response Measures<\/title>\n<meta name=\"description\" content=\"WazirX lost Rs. 235 million in a cyberattack. Learn what happened and understand withdrawal guidelines if you&#039;re an affected investor.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The WazirX Hack: A Detailed Account and Response Measures\" \/>\n<meta property=\"og:description\" content=\"WazirX lost Rs. 235 million in a cyberattack. Learn what happened and understand withdrawal guidelines if you&#039;re an affected investor.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/\" \/>\n<meta property=\"og:site_name\" content=\"Blogs\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-11T12:13:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/d3eaaex9d02d1j.cloudfront.net\/assets\/ogimage\/Blog.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"667\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@1FinanceHQ\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/\",\"url\":\"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/\",\"name\":\"The WazirX Hack: A Detailed Account and Response Measures\",\"isPartOf\":{\"@id\":\"https:\/\/1finance.co.in\/blog\/#website\"},\"datePublished\":\"2024-07-25T07:51:51+00:00\",\"dateModified\":\"2026-02-11T12:13:51+00:00\",\"description\":\"WazirX lost Rs. 235 million in a cyberattack. Learn what happened and understand withdrawal guidelines if you're an affected investor.\",\"breadcrumb\":{\"@id\":\"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/1finance.co.in\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blogs\",\"item\":\"https:\/\/1finance.co.in\/blog\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"The WazirX Hack: A Detailed Account and Response Measures\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/1finance.co.in\/#website\",\"url\":\"https:\/\/1finance.co.in\/\",\"name\":\"1 Finance\",\"description\":\"Our single focus, to get you to re-imagine your Personal Finance What does this mean ? There\u2019s a process to grow your money while you peacefully sleep, which only the top 5% have access to. It\u2019s what makes the rich, even richer.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/1finance.co.in\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The WazirX Hack: A Detailed Account and Response Measures","description":"WazirX lost Rs. 235 million in a cyberattack. Learn what happened and understand withdrawal guidelines if you're an affected investor.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/","og_locale":"en_US","og_type":"article","og_title":"The WazirX Hack: A Detailed Account and Response Measures","og_description":"WazirX lost Rs. 235 million in a cyberattack. Learn what happened and understand withdrawal guidelines if you're an affected investor.","og_url":"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/","og_site_name":"Blogs","article_modified_time":"2026-02-11T12:13:51+00:00","og_image":[{"width":1000,"height":667,"url":"https:\/\/d3eaaex9d02d1j.cloudfront.net\/assets\/ogimage\/Blog.png","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@1FinanceHQ","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/","url":"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/","name":"The WazirX Hack: A Detailed Account and Response Measures","isPartOf":{"@id":"https:\/\/1finance.co.in\/blog\/#website"},"datePublished":"2024-07-25T07:51:51+00:00","dateModified":"2026-02-11T12:13:51+00:00","description":"WazirX lost Rs. 235 million in a cyberattack. Learn what happened and understand withdrawal guidelines if you're an affected investor.","breadcrumb":{"@id":"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/1finance.co.in\/blog\/the-wazirx-hack-a-detailed-account-and-response-measures\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/1finance.co.in\/"},{"@type":"ListItem","position":2,"name":"Blogs","item":"https:\/\/1finance.co.in\/blog\/"},{"@type":"ListItem","position":3,"name":"The WazirX Hack: A Detailed Account and Response Measures"}]},{"@type":"WebSite","@id":"https:\/\/1finance.co.in\/#website","url":"https:\/\/1finance.co.in\/","name":"1 Finance","description":"Our single focus, to get you to re-imagine your Personal Finance What does this mean ? There\u2019s a process to grow your money while you peacefully sleep, which only the top 5% have access to. It\u2019s what makes the rich, even richer.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/1finance.co.in\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/1finance.co.in\/1f-dashboard\/wp-json\/wp\/v2\/blog\/3839"}],"collection":[{"href":"https:\/\/1finance.co.in\/1f-dashboard\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/1finance.co.in\/1f-dashboard\/wp-json\/wp\/v2\/types\/blog"}],"replies":[{"embeddable":true,"href":"https:\/\/1finance.co.in\/1f-dashboard\/wp-json\/wp\/v2\/comments?post=3839"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/1finance.co.in\/1f-dashboard\/wp-json\/wp\/v2\/media\/3840"}],"wp:attachment":[{"href":"https:\/\/1finance.co.in\/1f-dashboard\/wp-json\/wp\/v2\/media?parent=3839"}],"wp:term":[{"taxonomy":"blog-category","embeddable":true,"href":"https:\/\/1finance.co.in\/1f-dashboard\/wp-json\/wp\/v2\/blog-category?post=3839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}