BitoPro
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 58. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +10. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6.4 |
| Incidents it suffered (e.g. hacks) | -9.6 |
| Problems around it, caused by others | -0.8 |
| Long-running | +10 |
| Sum | 58 |
Score: 58/100 (kept between 0 and 100)
How scoring works →Summary
BitoPro is a Taiwanese centralized cryptocurrency exchange operated by BitoGroup, serving over 800,000 users with TWD (New Taiwan Dollar) fiat on/off-ramps. On May 8, 2025, the exchange suffered an approximately $11.5 million hot wallet theft attributed to North Korea's Lazarus Group via a social-engineering and AWS-token-hijacking attack. The exchange did not publicly disclose the breach for approximately 25 days, only confirming the incident after on-chain investigator ZachXBT flagged suspicious outflows on June 2, 2025.
Connected Entities
8 entities · 60 linked investigations- BitoPro→mentioned with→Polygon(70%)
- ZachXBT→mentioned with→Ethereum(70%)
- THORChain→mentioned with→Ethereum(70%)
- BitoPro→mentioned with→Ethereum(70%)
- Polygon→mentioned with→Ethereum(70%)
- Solana→mentioned with→Ethereum(60%)
- North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign→mentioned with→Ethereum(60%)
- BitoPro→mentioned with→THORChain(70%)
- BitoPro→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
- THORChain→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
- + 9 more
Timeline(6 events)
2018
BitoPro exchange launched by BitoGroup (BitoEX team), providing TWD fiat crypto trading in Taiwan.
8 May 2025
Lazarus Group (alleged) exploits BitoPro hot wallets during a routine system upgrade, stealing approximately $11.5 million across Ethereum, Tron, Solana, and Polygon via malware, AWS session token hijacking, and C2-directed withdrawals.
2 June 2025
ZachXBT publicly flags approximately $11.5 million in suspicious hot wallet outflows from BitoPro on Telegram, stating the exchange was 'likely exploited.' ZachXBT documents the laundering trail through Tornado Cash, ThorChain, and Wasabi Wallet.
2 June 2025
BitoPro confirms the security breach approximately three hours after ZachXBT's public post, stating an 'old hot wallet' was compromised during a system upgrade. The exchange states user funds are unaffected and have been replenished from internal reserves.
Decision Log
- slot 455365212 · hash 13Z5JczVwEEFEBh6axvfQps14XvBPcvjPiEp72ZhioUJ
- slot 420795121 · hash 8ei7eG61SeETLyn5dfSC6XL6znvTjYEzeP8xTdzM18ds
This investigation is cryptographically anchored to the Solana blockchain (2 decisions).
model: claude-sonnet
generated: 5/4/2026, 4:05:05 PM
last updated: 10/10/2026, 6:45:25 PM
7 viewsavoid.net — verified advice for a post-truth world