Bitonic confirms breach; bitcoin theft from three customers repaid
Dutch bitcoin broker Bitonic was breached through a flaw on Sunday; hackers stole small sums of bitcoin from three customers and changed two accounts' logins. Bitonic says it repaid all three and cannot yet rule out that other customers' personal data was viewed. Customers should change credentials, enable two-factor authentication, and monitor their accounts.
What happened
Hackers broke into Dutch bitcoin broker Bitonic through a flaw on Sunday. They stole small sums of bitcoin from three customers and changed two accounts' logins. Bitonic says it repaid all three affected customers.
Why it matters
Beyond the money taken, Bitonic cannot yet rule out that other customers' personal data was viewed, raising fraud risk for those customers. The case hits trust in a platform used to buy and hold bitcoin.
What to do
Bitonic customers should change passwords, enable two-factor authentication, and watch accounts and email for suspicious activity. The company should confirm which personal data was accessed and notify customers.
For the technical team
- Affected
- Bitonic (corretora holandesa de bitcoin); contas de clientes · Bitonic, Dutch bitcoin broker; customer accounts. No specific product version cited in the sources.
- Exploitation
- Exploitation occurred on Sunday, confirmed by Bitonic: small sums of bitcoin stolen from three customers and logins changed on two accounts. No technical details, public PoC, or KEV listing reported in the sources.
- Fix
- No software fix disclosed in the sources. Bitonic says it repaid all three affected customers.
- Vector
- Breach of the broker through a flaw, per Bitonic; the nature of the flaw and exploitation prerequisites were not disclosed in the sources.
- More details
- Bitonic cannot yet rule out that other customers' personal data was viewed. Reported by @IntCyberDigest; confirmation recorded on 2026-10-27.
Timeline
Broker Bitonic confirms breach through a flaw, with bitcoin stolen from three customers already repaid.
Sources 1 source
- @IntCyberDigest @IntCyberDigest



