China
The prohibition has been accompanied by separate work on the state digital yuan, which is a central bank currency and not a crypto-asset in the sense used elsewhere on this site.
Whether you own the assets or merely have a claim against the company is decided by paperwork written long before the failure — not by a balance on a screen.
| Disclosed | Incident | Chain | Reported impact | Status |
|---|---|---|---|---|
| Bybit Cold Wallet Compromise, February 2025: What Happened & What to Check | Ethereum | approx. US$1.5 billion(FBI (IC3 Public Service Announcement), 26 Feb 2025) | Resolved | |
| Radiant Capital Signing Compromise, October 2024: What Happened & What to Check | Arbitrum, BNB Chain | approx. US$50 million(Radiant Capital, 17 Oct 2024) | Contained | |
| WazirX Multisig Compromise, July 2024: What Happened & What to Check | Ethereum | approx. US$234.9 million(WazirX, 18 Jul 2024) | Contained | |
| DMM Bitcoin Unauthorised Outflow, May 2024: What Happened & What to Check | Bitcoin | 4,502.9 BTC(DMM Bitcoin, 31 May 2024) | Resolved | |
| Munchables Insider Key Compromise, March 2024: What Happened & What to Check | Blast | approx. US$62 million (returned)(Munchables, 26 Mar 2024) | Resolved | |
| Orbit Chain Bridge Compromise, December 2023: What Happened & What to Check | Ethereum, Orbit Chain | approx. US$81.5 million(Orbit Chain, 1 Jan 2024) | Contained |
The prohibition has been accompanied by separate work on the state digital yuan, which is a central bank currency and not a crypto-asset in the sense used elsewhere on this site.
The practical position has been shaped less by prohibition than by Banxico limiting the virtual assets institutions may offer to the public, which has kept regulated retail access narrow.
The SEC has continued to adjust rules on custody, advertising and retail access, and Thailand publishes a register of licensed operators.
The SC has periodically acted against unregistered platforms operating into Malaysia, and publishes an investor alert list naming them.
Read enough incident records and the same handful of shapes recur. Knowing the shapes is more useful than knowing the individual events.
Cold storage describes where a key is held. It says nothing about how a transaction gets approved — which is where several…
An audit badge tells you almost nothing. The scope section tells you nearly everything — which commit was reviewed, which contracts were…
Most deployed contracts are upgradeable, which means someone can change what they do to funds already held. That control chain is public…
"Regulated" is not a property a firm can assert about itself. It means a named authority, a named permission category, and an…
The most expensive failures in crypto have not broken cryptography. They changed what the signer was shown. Here is what to look…
A token approval is a standing authorisation that outlives the transaction that created it. Here is how to see what yours have…
The hours after a genuine incident are when fake advisories, fake support and fake recovery tools work best. Here is how to…
Self-custody removes one category of risk and adds another. Understanding which is which is the whole decision.
Bridges account for several of the largest losses on record. The reason is structural, and it is visible in every one of…
No tool on Conisec asks for a seed phrase, a private key, a signature or a wallet connection. Nothing on this site connects to a wallet.