On July 18, 2024, WazirX, India's largest cryptocurrency exchange, suffered a devastating cyberattack that resulted in the theft of approximately $234.9 million in digital assets, wiping out nearly 45% of the platform's reserves. The breach targeted a multisignature (multisig) Ethereum wallet managed jointly by WazirX and its custody provider, Liminal. Though the wallet required four of six approvals to execute transactions, the attackers exploited a smart contract manipulation technique, tricking signatories into approving a malicious update that handed over full control of the wallet.
How the Attack Unfolded
Blockchain analysis revealed that the hacker prepared for eight days, funding their initial operations via the cryptocurrency mixer Tornado Cash on July 10, 2024. On the day of the attack, they drained $97 million in Shiba Inu (SHIB) and $53 million in Ethereum (ETH), among other assets. Post-attack, the hacker converted most stolen assets into ETH and funneled them through Tornado Cash to obscure the trail. By September 2024, only $6 million in traceable ETH remained.
The precision and scale of the attack point to the North Korean Lazarus Group, a state-sponsored hacking collective notorious for targeting crypto platforms. Their involvement complicates recovery efforts, as they rarely negotiate or face legal accountability.
Immediate Fallout and User Impact
WazirX serves approximately 15 million users, primarily in India. Following the hack, the exchange halted all trading and launched a $23 million bounty program, but managed to freeze only $3 million in stolen assets. In August 2024, the platform proposed a controversial “socialized loss” recovery plan, which would distribute the losses proportionally among all users. This plan sparked outrage, leading to legal challenges. In January 2025, a Singapore court approved WazirX's restructuring plan, with trading expected to resume by February 2025. However, the compensation plan caps claims at the asset values as of July 18, ignoring subsequent price surges—for instance, the value of SHIB rose from $102 million to $173 million. This has fueled anger, especially among Bitcoin holders whose funds were unaffected by the hack, yet they are forced to bear part of the loss.
Key Lessons for the Crypto Industry
The WazirX hack underscores critical vulnerabilities that need addressing:
1. Centralized Risks: Storing 50% of reserves in a single wallet magnified the damage. Diversification across multiple wallets is essential.
2. Smart Contract Security: The attack exploited human error in approving a malicious contract. Rigorous auditing and decentralized custodian solutions could prevent similar breaches.
3. Regulatory Gaps: India's unregulated crypto sector left users with limited recourse. Clear frameworks are needed to protect investors and enforce accountability.
4. User Awareness: Phishing and social engineering played a role. Users must verify every transaction and avoid suspicious links or domains.
What Lies Ahead
The hack may accelerate stricter crypto regulations in India, potentially stifling growth in the short term. Centralized exchanges face growing scrutiny, pushing users toward decentralized finance (DeFi) alternatives. For investors, the incident is a stark reminder to prioritize security—use hardware wallets for offline storage, diversify holdings across platforms and wallets, enable two-factor authentication (2FA), and stay informed about platform security practices. As the crypto market evolves, both exchanges and users must adapt to protect assets in an increasingly complex digital landscape.