Stablecoin Bank Infini Loses $49.5M Worth of USDC to Hackers

Highlights:

• Infini was the target of a malicious attack that resulted in a $49.5 million loss.
• The scammers invested the proceeds from the hack incident in Ethereum.
• Reacting to the unfortunate event, the Infini founder accepted responsibility and promised to reimburse affected users.

In the early hours of today, Spotonchain, a renowned on-chain crypto transaction tracker, reported that the Hong Kong-based stablecoin bank Infini suffered a security compromise, resulting in an approximately 49.5 million USD Coin (USDC) loss.

Despite tracking the transaction in an earlier tweet, Spotonchain did not identify the over $40 million scam victim. However, the on-chain tracker recently shared a new tweet confirming that Infini was the target of the fresh crypto hack.

Reporting the unfortunate incident, Spotonchain stated:

“Over the past hour, the newly created wallet “0x3ac” spent $49.52 million DAI to buy 17,695 ETH at an average price of $2,798.”

The crypto transactions tracker added that the malicious actors got its 0.994 funding ETH from Tornado Cash, an open-source and fully decentralized protocol on the Ethereum chain. It also noted that the scammers got stablecoins from a yet-to-be-identified multi-signature wallet.

A fresh wallet just scooped up $49.5M worth of $ETH!

Over the past hour, the newly created wallet “0x3ac” spent 49.52M $DAI to buy 17,695 $ETH at an average price of $2,798.

This wallet got its 0.994 funding ETH from #TornadoCash and its stablecoins from an unknown… pic.twitter.com/8lDGHMyA6O

— Spot On Chain (@spotonchain) February 24, 2025

In the fresh update, where it confirmed the scam victim, the on-chain tracker mentioned that the malicious actors have moved the newly procured Ethereum tokens to a new wallet, “xfcc.” Meanwhile, Spotonchain noted that Infini founder, Christian, has reacted to the hack incident via a tweet.

Infini Founder Promises to Compensate Affected Users

Allaying customers’ fear, the founder assured them that his private key was safe, adding that it never leaked. He took the blame and responsibility for the unfortunate event, citing that he was naive when transferring authority. Going further, Christian appreciated customers’ support and promised full compensation for affected users.

The founder revealed that there was no problem with liquidity. He also mentioned that the procedures to trace the stolen funds have already begun. Concluding, Christian reiterated his commitment to rebuilding users’ trust. Part of his statement read, “I’m sorry to have worried everyone who trusted us. I know rebuilding trust will be a difficult process, but we won’t give up.”

🚨 This turned out to be a hack targeting the crypto neo-bank Infini.@Christianeth, founder of @0xinfini, assured that no private keys were leaked and that there would be no liquidity issues.

The hacker has transferred all newly purchased $ETH to the new wallet "0xfcc".… https://t.co/pkXabKdntv pic.twitter.com/vHyR60Ut1U

— Spot On Chain (@spotonchain) February 24, 2025

Market Participants Reactions as Infini Loses $49.5M USDC to Hackers

In the crypto space, the unfortunate event has undoubtedly raised marked concerns among market participants. Many are in perpetual fear as no one knows the next target. A few days ago, Bybit, a centralized trading platform, suffered one of the biggest crypto heists in history.

According to reputable reports, the exchange forfeited roughly $1.5 billion in a sophisticated scam linked to North Korea’s crypto hacking setup, “The Lazarus Group.” While the crypto community is still trying to recover from the Bybit incident, the new security breach involving Infini has raised concerns about the growing frequency of malicious attacks on Decentralized Finance (DeFi).

Renowned for boasting a more secure setup than its centralized counterpart, hackers seem to be having seamless unauthorized access to most DeFi platforms recently. If not curtailed, this will have a Ripple effect on the entire crypto space because it is already eroding trust in Web3.

Looking ahead, it is gradually becoming obvious that centralized and decentralized finance firms must start prioritizing security. They can achieve this by investing more funds into research to improve security and eliminate every vulnerability that scammers might want to exploit. Also, learning from companies that were victims of some of these scam exploits could be an ideal step to forestall future reoccurrence.