Cybercriminals Steal 50 Million Tokens from Trade.io Exchange Wallet
Over the past weekend, representatives of the trading platform Trade.io reported a cyberattack on their service. Unknown attackers stole 50 million of the platform’s own tokens, Trade Token (TIO), from the project’s cold wallet. At the time of the attack, the tokens were valued at approximately $7.8 million. The only relatively good news is that the stolen tokens belonged to the company itself, not to its users.
The exact method of the attack remains unclear. According to platform representatives, all necessary security protocols were followed when working with the cold wallet—typically involving a separate, custom USB device containing the required data—and secure bank safe deposit boxes were used. It is known that these safe deposit boxes were not compromised, so the precise method of the breach is still unknown.
Although the investigation is far from complete, it has been reported that immediately after the theft, the attackers transferred about 1.3 million tokens to the Bancor and Kucoin exchanges. Representatives from these exchanges are now assisting Trade.io developers in investigating the incident. All three platforms have temporarily suspended deposits, withdrawals, and trading of TIO tokens.
The Trade.io team is currently considering the possibility of a TIO hard fork to render the stolen tokens useless. A final decision on this matter is expected within the next 24 hours.
Trade.io representatives emphasize that the hack will not affect the platform’s regular trading activity, and the service continues to operate as usual.