World's Biggest Ever Digital Currency Theft

One of Japan's largest digital currency exchanges says it has lost some $534m (£380m) worth of virtual money in a hacking attack on its network.

Coincheck suspended deposits and withdrawals for all crypto-currencies except Bitcoin as it assessed its losses in NEM, a lesser-known coin.

If the theft is confirmed, it will be the largest involving digital currency.

Another Tokyo exchange, MtGox, collapsed in 2014 after admitting that $400m had been stolen from its network.

The stolen Coincheck money was said to be kept in a "hot wallet" - a part of the exchange connected to the internet. That contrasts with a cold wallet, where funds are stored securely offline.

Coincheck says it has the digital address of where the money was sent and is going to do what it can to compensate investors.

What do we know about the Hack?

Hackers broke in at 02:57 (17:57 GMT) on Friday 26th January, the company said in a statement, but the breach was not discovered until 11:25, nearly eight and a half hours later.

Company chief operating officer Yusuke Otsuka said 523m NEMs had been sent from Coincheck's NEM address during the breach.

"It's worth 58bn yen based on the calculation at the rate when detected," he said at a press conference at the Tokyo Stock Exchange.

Coincheck was still examining how many customers had been affected and trying to establish whether the break-in had been launched from Japan or another country.

"We know where the funds were sent," Mr Otsuka added. "We are tracing them and if we're able to continue tracking, it may be possible to recover them. But it is something we are investigating at the moment."

Coincheck reported the incident to the police and to Japan's Financial Services Agency.

How damaging is the Loss?

NEM, the 10th-largest crypto-currency by market value, fell 11% over a 24-hour period to 87 cents, as of 18:30, Bloomberg news agency reports.

Among the other crypto-currencies, Bitcoin dropped 3.4% and Ripple retreated 9.9% on Friday, according to prices seen by the agency.

More was lost on Friday than in 2014, when MtGox lost what it thought was 850,000 bitcoins. However, MtGox later found 200.000 bitcoins in an old digital wallet.

After the collapse of MtGox shook the digital currency world, a licensing system was introduced in Japan to increase oversight of local currency exchanges such as Coincheck.

"What's the lasting impact? It's hard to tell," Marc Ostwald, global strategist at ADM Investor Services International in London, told Bloomberg.

"Japan is one of the most pro-crypto trading countries, among the G-20. In Japan they don't really want a wholesale clampdown. So it will be interesting how Japanese regulators respond to this, if they indeed do."

What is Coincheck?

Founded in 2012, the company is based in Tokyo, where it employed 71 people as of August last year.

Its headquarters are located in the city's Shibuya district, an area popular with start-ups that was also home to MtGox.

Last year, Coincheck began running adverts on national television featuring popular local comedian Tetsuro Degawa, the agency adds.

BBC:

You Might Also Read: 

Bitcoin Exchanges Under Siege:

After A $65m Hack, Is Bitcoin Really Safe & Secure?:

Russian Arrested For $4billion Bitcoin Theft:

« Russia's New Generation Of Military Robots
Bizarre: Snowden Calls For Secret Memo To Remain Secret »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

RU-CERT

RU-CERT

RU-CERT is the CSIRT / CERT team of the Russian Federation.

CCN-CERT

CCN-CERT

CCN-CERT is the Spanish national government computer security incident response centre.

BGD E-GOV CIRT

BGD E-GOV CIRT

BGD e-GOV CIRT's mission is to support government efforts to develop ICT programs by establishing incident management capabilities within Bangladesh.

DNV

DNV

DNV are the independent expert in assurance and risk management. We deliver world-renowned testing, certification and technical advisory services.

Jscrambler

Jscrambler

Jscrambler addresses all your JavaScript and Web application protection needs.

SecuGen

SecuGen

SecuGen is a leading provider of advanced, optical fingerprint recognition technology, products, tools and platforms for physical and information security.

CTERA Networks

CTERA Networks

CTERA provides cloud storage solutions that enable service providers and enterprises to launch managed storage, backup, file sharing and mobile collaboration services using a single platform.

CopSonic

CopSonic

Copsonic provide a technology solution based on ultrasonic waves to send secure and encrypted data between two devices in order to achieve authentication.

Calypso AI

Calypso AI

Calypso AI build software products that solve complex AI risks for national security and highly-regulated industries.

SecurityGate

SecurityGate

SecurityGate.io is the only Integrated Risk Management platform built for OT/ICS cybersecurity. The leading Risk Assessment Platform for Critical Infrastructure.

Foretrace

Foretrace

Foretrace aims to prevent, assess, and contain the exposure of customer accounts, domains, and systems to malicious actors.

GovernmentCIO

GovernmentCIO

GovernmentCIO was founded with a single purpose: to transform government IT. We are thought leaders in data analytics, machine learning, cybersecurity and IT transformation.

CybersCool Defcon

CybersCool Defcon

CybersCool is committed to educate and train, re-skill and up-skill the current workforce of various industries and businesses in the knowledge and know-how of cybersecurity.

Atlas Cloud

Atlas Cloud

Atlas Cloud is a UK-wide provider of managed services based in Newcastle. Our ‘research-led’ approach to IT services helps leaders make better decisions about IT for their businesses.

Sentar

Sentar

Sentar is a cyber intelligence company, applying advanced analytics and systems engineering expertise to protect our national security by securing mission-critical assets.

Intraframe US

Intraframe US

Intraframe US is a cybersecurity company in Memphis, specializing in Digital Forensics Incident Response and Managed IT services. We provide SMBs with a 24/7 SOC for proactive Cyber Threat Management.