Overview
- Attackers used credentials tied to Bitcoin Depot’s digital‑asset settlement accounts on March 23 to move about 50.903 BTC, valued at roughly $3.665 million, from company wallets.
- The company said it activated incident‑response procedures, brought in outside cybersecurity firms, and notified law enforcement, adding that customer platforms and data were not touched.
- Bitcoin Depot recorded a preliminary $3.665 million loss and said insurance may cover part of it, while classifying the event as material on April 6 due to potential legal, regulatory, and reputational costs.
- BTM shares closed up 15.6% on Wednesday after the disclosure, even as the investigation continues and the firm says operations have not been materially affected.
- The breach highlights a broader risk in crypto operations where access to off‑chain settlement tools can let thieves bypass blockchain controls, a concern for large cash‑to‑crypto networks that handle thousands of ATM locations.