WOO X Halts Withdrawals After $14M Exploit Hits Nine User Accounts
Crypto exchange WOO X suspends withdrawals after $14M hack, pledges full reimbursement to affected users as investigation unfolds.
Cryptocurrency trading platform WOO X has suspended all user withdrawals following a $14 million exploit that compromised nine accounts, triggering an urgent security response from the platform.
The incident occurred on July 24 and was first flagged by blockchain security firm Cyvers Alerts, which detected suspicious activity across several major networks, including Bitcoin, Ethereum, BNB, and Arbitrum. According to Cyvers, the attack began when $1 million in USDT was transferred from WOO X’s hot wallet to a suspicious Ethereum address. The stablecoin was then exchanged for ETH, with subsequent transfers totaling $7.3 million to a new wallet.
Similar patterns were observed on the BNB Chain, where an attacker address received 5 BTCB (Bitcoin BEP2) from compromised accounts. These assets were quickly swapped for BNB and moved to other destinations.
In response, WOO X swiftly paused withdrawals as a precautionary measure. Initially, the platform claimed user funds and trading operations were unaffected. However, a later statement acknowledged that nine accounts had been directly impacted. “As we continue with the investigation, we can confirm losses of $14M from the affected accounts. These users will have all funds covered,” WOO X stated on X (formerly Twitter).
The platform is currently working with external blockchain investigators and partnering exchanges to trace and block the flow of the stolen assets. It has also contacted affected customers and pledged full reimbursement of the unauthorized withdrawals.
This latest breach adds to a growing list of crypto security incidents in 2025. Just days earlier, hackers stole $44 million from CoinDCX, and earlier this year, losses from crypto-related hacks and exploits surpassed $3.1 billion—already eclipsing the total losses reported in 2024.
Experts warn that these attacks increasingly leverage human vulnerabilities and artificial intelligence tools to orchestrate sophisticated schemes. While the rapid response from WOO X limited further exposure, the breach underscores the persistent and evolving nature of threats in the decentralized finance space.
WOO X’s crisis management and decision to reimburse affected users may help restore trust, but the incident also raises urgent questions about the readiness of centralized platforms to defend against multi-vector exploits in a growingly complex threat landscape.
