Hack history / 2022 / Hack or exploit
Crypto.com
Hack or exploit on Jan 18, 2022 · Session Key Compromised
SOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$34M
dollars at the time
Returned
none listed
as the sources state it
Rank
#145
among thefts by dollars lost
What happened
Crypto.com's 2FA system vulnerability allowed attackers to bypass authentication and withdraw $33.7M (4,836 ETH + 444 BTC + $66.2K USD) from 483 user accounts without entering 2FA codes.
Details
- Date
- Jan 18, 2022
- Kind
- Hack or exploit
- Method
- Session Key Compromised
- How in
- Keys, accounts and infrastructure
- Target
- Centralized exchange
- Chains
- Ethereum, Bitcoin
- Audit (rekt.news)
- Deloitte
After the theft
- Victims reimbursed
- yes, amount not stated
“In most cases we blocked unauthorized withdrawals and in all other cases clients were fully reimbursed.” (SlowMist Hacked)
Related incidents
Single attacker steals $2.25 million from three crypto projects in the "Artificial Superintelligence Alliance" 2026 · Hack or exploit · $2.2M
Exploit on Rain crypto payments infrastructure provider causes losses for "self-custodial" neobanks 2026 · Hack or exploit · $1.1M
Crypto DAO 2026 · Hack or exploit · $8.2M
Crypto DAO 2026 · Hack or exploit · $52K
Dutch Knaken crypto platform collapses with $8 million in customer funds missing 2026 · Collapse or insolvency · $8M
Exploit on Rain crypto payments infrastructure provider causes losses for "self-custodial" neobanks 2026 · Hack or exploit · $1.1M
Crypto DAO 2026 · Hack or exploit · $8.2M
Crypto DAO 2026 · Hack or exploit · $52K
Dutch Knaken crypto platform collapses with $8 million in customer funds missing 2026 · Collapse or insolvency · $8M
Cite this page
SwanBluechip, "Crypto.com hack, Jan 18, 2022: $34M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht744bb8246e/ (data as of 2026-10-31).