Retail & Fintech · Crypto exchange / app · Data breach

Crypto.com

In January 2022 attackers took about $34 million in crypto from 483 Crypto.com customer accounts.

Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.

In January 2022 attackers took about $34 million in crypto from 483 Crypto.com customer accounts. The company's own report said transactions were approved 'without two-factor authentication' on those accounts, and some users said they lost funds even with 2FA on. The CEO said affected users were fully reimbursed. The company's 2024 dispute with the SEC ended when the SEC closed its investigation in 2025.

Severity
Evidence tierUnassigned
Claims confirmed
Last verified2026-10-16

Primary source. engadget.com/cryptocom-loses-34-million-hack-110519248.html — Unverified - heuristic first draft.

Freshness. Last verified 23 days ago (2026-10-16); stale after 180 days.

Terms

Arbitration

Not verified this pass (terms page fetch failed).

Data sharing

CONFIRMED SECURITY INCIDENT (Jan 2022): unauthorized withdrawals from 483 accounts; 2FA was bypassed per the company report. Privacy policy disclosures not verified this pass (fetch failed).

Who holds your data. Data chain: Crypto.com, then Foris DAX Asia Pte. Ltd. (Singapore), reportedly a subsidiary of Foris DAX MT (Malta) Limited per Wikipedia ('citation needed'). U.S. operating entity not verified. (parent).

Fees and billing

Not verified this pass (terms page fetch failed).

Contacts

Privacy contact. Not recorded.

Legal notice. Wikipedia lists 1 Raffles Quay, #25-01, Singapore 048583. U.S. notice address not verified this pass.

Mailing address. Not recorded.

Paper trail: none. No published channel.

Evidence

No claims have been itemized for this row yet.

Sources

Source	Claim	Tier	Status	Quote
news · 2022-01-20 engadget.com/cryptocom-loses-34-million-hack-110519248.html	whole row	Unassigned	confirmed	“without two-factor authentication for a small number of accounts” Quote basis: not recorded.
encyclopedia (lead only) · 2026-10-16 en.wikipedia.org/wiki/Crypto.com	whole row	Unassigned	confirmed	“filed a lawsuit against the U.S. Securities and Exchange Commission after receiving a Wells notice” Quote basis: not recorded.

Source vault

Link status: Candidate - not yet fetched

Document	Last fetch	PDF
Privacy policy No URL recorded	Not fetched yet	NOT CONFIRMED
Terms of service No URL recorded	Not fetched yet	NOT CONFIRMED
Website https://crypto.com	Not fetched yet	—
Primary source https://engadget.com/cryptocom-loses-34-million-hack-110519248.html Verification: Unverified - heuristic first draft	Not fetched yet	—

Enforcement

No enforcement actions are linked to this row.

State statute

No HQ state on file, so no state statute applies by headquarters.