Summary
Coincheck is a Tokyo-based cryptocurrency exchange that suffered what was, at the time, the largest cryptocurrency hack in history on January 26, 2018, when approximately 523 million NEM (XEM) tokens valued at roughly $534 million were stolen from a low-security hot wallet. The exchange was operating without a Financial Services Agency (FSA) license at the time of the breach, had failed to implement standard multisignature security for NEM holdings, and received multiple business improvement orders from Japanese regulators in the aftermath. Coincheck was subsequently acquired by Monex Group in April 2018, obtained its FSA license in January 2019, and listed on the Nasdaq in December 2024 via a SPAC merger under the ticker CNCK.
Connected Entities
1 entities- + 5 more
Timeline(15 events)
2012-01-01
Coincheck founded in Tokyo, Japan by Koichiro Wada and Yusuke Otsuka.
2017-04-01
Japan's Payment Services Act takes effect, requiring cryptocurrency exchanges to register with the FSA. Coincheck files an application but is permitted to continue operating while the application is pending.
2018-01-25
Attackers allegedly gain initial access to Coincheck's systems at approximately 17:57 UTC, believed to be via phishing emails that installed Mokes and Netwire malware on employee computers.
2018-01-26
At approximately 3:00 a.m. JST, 523 million NEM (XEM) tokens valued at approximately $534 million are transferred from Coincheck's hot wallet to attacker-controlled addresses. Coincheck detects the breach and halts NEM withdrawals.
2018-01-27
Coincheck publicly confirms the security breach and announces it will compensate affected users. The exchange suspends most trading and withdrawals.
2018-01-29
Japan's FSA issues its first business improvement order to Coincheck, directing the exchange to strengthen risk management and customer protection systems.
2018-02-02
FSA inspectors conduct an on-site raid of Coincheck's offices — described as the first such regulatory action against a Japanese cryptocurrency exchange.
2018-03-07
FSA issues a second business improvement order to Coincheck; separately issues suspension orders to two other Japanese exchanges and improvement orders to five more, reflecting industry-wide regulatory tightening.
2018-03-09
Coincheck begins compensating approximately 260,000 affected NEM holders, paying out approximately $411 million in total.
2018-03-22
The stolen NEM tokens are reportedly fully sold off by the attackers.
2018-04-06
Monex Group announces acquisition of 100% of Coincheck shares for approximately $33.5 million. The exchange becomes a wholly owned subsidiary.
2019-01-11
Japan's FSA approves Coincheck's registration as a licensed virtual currency exchange operator under the Payment Services Act, administered by the Kanto Financial Bureau.
2019-06-01
Asahi Shimbun reports that malware found on Coincheck employee computers — Mokes and Netwire — has known links to Russian threat actors, shifting earlier suspicion away from North Korea.
2024-12-05
Shareholders of Thunder Bridge Capital Partners IV approve the business combination with Coincheck Group N.V.
2024-12-11
Coincheck Group N.V. begins trading on the Nasdaq Global Market under tickers CNCK and CNCKW, becoming the first Japanese cryptocurrency exchange listed on a U.S. exchange. Market capitalization at listing was approximately $1.7 billion.
Decision Log
- hash: CTzWsWiTUtRTkiysFWsbvD71Bjyixwu5gNQHycHq27oH
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:55:01 AM
last updated: 5/25/2026, 5:56:59 PM
avoid.net — verified advice for a post-truth world