2025-08-19
WooX
July 24th - Security incident post-mortem
#UNC4899
#WooX
Woo X
#WooX
- Reported: 2025-07
- Locations: United States
- Motivations: #FinancialGain
- Sectors: #Cryptocurrency
Summary
In late July 2025, crypto exchange WOO X suffered a devastating security breach when a targeted phishing attack compromised a team member’s device, granting hackers access to the development environment and hot wallets. Within hours, unauthorized withdrawals totaled approximately $14 million across multiple blockchain networks—including Bitcoin, Ethereum, BNB Chain, and Arbitrum—despite WOO X’s claims of rapid detection and containment. This incident marks the third major security failure within the WOO ecosystem in under two years, following a $25 million API key theft at Kronos Research in 2023 and an $8.5 million flash-loan exploit of WooFi in March 2024, raising serious concerns about the exchange’s true level of operational security.