Mixin Network Hack — September 2023 Post-Mortem (Aggregated)
Overview
Mixin Network confirmed it was hacked for nearly $200 million on September 23, 2023.
The Attack Details
• The database of Mixin Network's cloud service provider was attacked by hackers.
• The cloud service provider's database compromise allowed the attacker to access Mixin Network's hot wallets.
• Mixin Network did not publicly identify the cloud service provider.
Response and Investigation
• Contacted Google and crypto security firm SlowMist to help with the investigation.
• Google-owned Mandiant confirmed it was assisting with the cleanup.
Impact
• The hack was the biggest theft in the crypto world in 2023.
• Deposit and withdrawal services on Mixin Network were temporarily suspended.
• Mixin did not shut down after the exploit and still claimed to have more than $1 billion worth of assets under management and more than 1 million customers.
Subsequent Money Movement
$3.85 Million in Ethereum from the Mixin Network hack was later sent to Tornado Cash.