WazirX hack
About $230M+ was stolen from India's largest crypto exchange, WazirX, in July 2024 after attackers compromised a multisignature wallet and altered its logic. Blockchain analysts attributed the theft to North Korea's Lazarus Group.
Also known as: WazirX, WazirX hack
Summary
On July 18, 2024, WazirX — then India's largest cryptocurrency exchange — lost an estimated $230–235 million from one of its multisignature wallets, including large amounts of Shiba Inu, Ether, Polygon, and Pepe tokens. [1][2]
Cause and attribution
Analysts reported the attackers, after seeding the attack days earlier, induced WazirX signers to approve a transaction that altered the smart contract governing the multisig, giving the attackers full control to drain it. Blockchain-analytics firm Elliptic and others attributed the hack to the Lazarus Group based on on-chain and laundering patterns. WazirX, which used third-party custody from Liminal, and Liminal each disputed where the compromise originated; the loss forced a restructuring and froze customer withdrawals. [1][2][3]
Bracketed numbers refer to the numbered sources listed below.
Sources (3)
See also
Gala Games exploitTokensOn May 20, 2024 an attacker abused a privileged minter account on the GALA token contract to mint 5 billion GALA (≈$200M+ nominal) and dumped ~600M of them for ~$22M of ETH before Gala froze the address. Gala Games called it an internal access-control failure; the attacker later returned the ~$22M.
HEX / PulseChain (Richard Heart)ProjectsCrypto projects (HEX, PulseChain, PulseX) created by Richard Heart (Richard Schueler). In July 2023 the U.S. SEC sued him for offering unregistered securities that raised $1B+ and for allegedly misappropriating ~$12M for luxury goods (including a 555-carat diamond). A court dismissed the case in 2024 for lack of U.S. jurisdiction; there was no finding of wrongdoing and Heart denies the allegations.
This page was last updated on Jun 15, 2026. View revision history.
