Bitcoin Depot discloses US$3.665 million theft from company bitcoin wallets
Attackers stole approximately 50.903 bitcoin from Bitcoin Depot’s company wallets. The company found no evidence of customer data theft. No customer update or password reset was advised; recovery of the stolen funds remains unconfirmed.
Nothing for you to do for this theft: the disclosed loss involved company wallets, and Bitcoin Depot found no evidence of customer personal information being accessed or stolen. The disclosures reviewed do not recommend a customer password reset or software update.
What’s happening
Bitcoin Depot, the cryptocurrency ATM operator, discovered an intrusion on 23 March 2026 and disclosed it on 8 April. An attacker obtained credentials for its cryptocurrency settlement accounts and transferred approximately 50.903 bitcoin from company-controlled wallets, a loss valued at US$3.665 million. Bitcoin Depot said it believed the intrusion was confined to its corporate environment and found no evidence that customer personal information had been accessed or stolen. It engaged external investigators, notified law enforcement and began strengthening its systems. Insurance might cover some losses, but payment was not assured. Separately, on 18 May, the company announced a wind-down through Chapter 11 and took its ATMs offline, citing regulatory and financial pressures. As of 3 November, the sources reviewed do not confirm recovery of the stolen bitcoin, an insurance payout, criminal charges or a final investigation outcome.
- What
- Breach
- Affects
- Bitcoin Depot corporate systems and company cryptocurrency wallets
- Fixed in
- Nothing to patch
- Since
- 8 Apr 2026
- Closed
- 18 May 2026
Timeline
- Update
Bitcoin Depot announced a Chapter 11 process to wind down operations and sell assets, and said its ATM network had been taken offline. It attributed the decision to regulatory restrictions, litigation and enforcement pressures; this announcement did not establish recovery of the stolen bitcoin.
- Made public
Bitcoin Depot disclosed that compromised settlement-account credentials enabled the theft of approximately 50.903 bitcoin, valued at US$3.665 million. It reported no evidence of customer personal information being accessed or stolen; its investigation remained open.
- Update
Bitcoin Depot determined that the incident was material because of potential reputational damage and legal, regulatory and response costs, despite no material operational impact identified at that point.
- UpdateNothing to patch
Bitcoin Depot discovered unauthorised access to its IT systems. It activated its incident response, brought in external specialists and notified law enforcement.
Sources
- Bitcoin Depot Form 8-K: Material Cybersecurity IncidentBitcoin Depot · 8 Apr 2026
- Bitcoin Depot Initiates Voluntary Chapter 11 Process to Facilitate an Orderly Wind-Down and Sale of the Company’s AssetsBitcoin Depot · 18 May 2026
- Cryptocurrency ATM giant Bitcoin Depot reports $3.6 million stolen in cyberattackThe Record · 9 Apr 2026
- Hackers steal $3.6 million from crypto ATM giant Bitcoin DepotBleepingComputer · 9 Apr 2026
- US crypto ATM operator Bitcoin Depot files for Chapter 11 to wind down businessThe Block · 18 May 2026