Skip to content

HTX (formerly Huobi)

Failure type
Hack
Date
September 2023
Reported loss
~5,000 ETH (~$8M) taken from a hot wallet (publicly reported estimate)

What happened

On 24 September 2023 roughly 5,000 ETH — about $8 million — was taken from a single HTX hot wallet. The exchange identified the attacker, negotiated the return of 95% of the funds and paid the remaining 5% as a white-hat bounty. Customer balances were covered in full.

What to take from it

Negotiating money back worked because the amount was small and the trail was public. That is an outcome, not a security control — no exchange can promise you the next attacker will take the deal.

Dates and figures are widely reported public estimates from coverage at the time, not KripZen's own audited data.

Where it sits on the record

The documented exchange failures we track, in the order they happened.

  1. 2014Mt. Gox
  2. 2015Bitstamp
  3. 2016Bitfinex
  4. 2016The DAO
  5. 2017Parity Multisig Wallet Freeze
  6. 2018BitConnect
  7. 2018Coincheck
  8. 2019Binance
  9. 2019Bitfinex / Crypto Capital
  10. 2019QuadrigaCX
  11. 2020KuCoin
  12. 2022Celsius Network
  13. 2022Crypto.com
  14. 2022FTX
  15. 2022Ronin Bridge
  16. 2022Terra / LUNA
  17. 2022Three Arrows Capital
  18. 2022Wormhole
  19. 2023HTX (formerly Huobi) (You are here)
  20. 2024DMM Bitcoin
  21. 2025Bybit