Skip to main content
AVOID.NET

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·4gK33j…A5bf

Summary

Crypto.com is a Singapore-headquartered centralized cryptocurrency exchange founded in 2016 (originally as Monaco) by Kris Marszalek, Bobby Bao, Gary Or, and Rafael Melo. The platform has been subject to multiple serious security incidents, including a confirmed January 2022 hack in which $34 million was stolen via a 2FA bypass and laundered through Tornado Cash, and an alleged 2023 data breach linked to the Scattered Spider hacking group that the company did not publicly disclose to affected users. Blockchain investigator ZachXBT has publicly accused Crypto.com of governance manipulation and tokenomics fraud, citing the March 2025 reissuance of 70 billion CRO tokens that had been permanently burned in 2021, and the company's controversial 2020 forced swap from its original MCO token to CRO at unfavorable rates.

Connected Entities

7 entities · 60 linked investigations
Organizations
Ethereum64Cronos ChainThree Arrows Capital2Terra/Luna2Crypto.comTectonic / Cronos — August 2026 TONIC Price Manipulation ExploitZachXBT82
Relationships
  • ZachXBTmentioned withEthereum(70%)
  • Crypto.commentioned withTectonic / Cronos — August 2026 TONIC Price Manipulation Exploit(75%)
  • Crypto.commentioned withEthereum(70%)
  • Crypto.commentioned withZachXBT(70%)
  • Cronos Chainmentioned withEthereum(70%)
  • Tectonic / Cronos — August 2026 TONIC Price Manipulation Exploitmentioned withEthereum(70%)
  • Three Arrows Capitalmentioned withTerra/Luna(75%)
  • Crypto.commentioned withThree Arrows Capital(80%)
  • Crypto.commentioned withCronos Chain(80%)
  • Terra/Lunamentioned withThree Arrows Capital(80%)
  • + 3 more
Have evidence about Crypto.com?

Timeline(21 events)

2016

Crypto.com (then called Monaco) founded in Hong Kong by Kris Marszalek, Bobby Bao, Gary Or, and Rafael Melo.

2016

CEO Kris Marszalek's prior company Ensogo abruptly ceases operations, leaving merchants and staff with unpaid debts.

July 2018

Monaco rebrands to Crypto.com after acquiring the domain from Matt Blaze.

3 August 2020

Crypto.com announces discontinuation of MCO token and forced MCO-to-CRO swap at 1:27.64 ratio, triggering widespread community backlash.

February 2021

Crypto.com burns 70 billion CRO tokens in what it calls 'the largest token burn in history,' reducing total supply from 100 billion to 30 billion. Blog post later deleted.

17 January 2022

Crypto.com exchange hacked via 2FA bypass. 483 accounts compromised; 4,836.26 ETH, 443.93 BTC, and $66,200 in other assets stolen — approximately $34 million total.

18 January 2022

PeckShield reports at least 4,600 ETH from the hack being laundered through Tornado Cash in 100 ETH batches.

20 January 2022

Crypto.com publicly confirms hack details, launches WAPP (Worldwide Account Protection Program) with up to $250,000 reimbursement for qualifying users.

8 August 2022

U.S. Treasury OFAC sanctions Tornado Cash, citing its use to launder stolen crypto — including proceeds from the Crypto.com hack.

6 October 2022

Crypto.com lays off approximately 2,000 employees (30% of workforce) amid crypto market downturn.

December 2022

Crypto.com publishes Mazars proof-of-reserves report. Mazars later distances itself from the report citing incomplete accounting of liabilities.

13 January 2023

Crypto.com lays off approximately 20% of remaining workforce (around 490 employees) following the FTX collapse.

2023

Alleged Scattered Spider social engineering breach of Crypto.com employee credentials. Personal data of a small number of users reportedly exposed. Not publicly disclosed to affected users.

2024

Scattered Spider member Noah Urban arrested, charged in connection with breaches at 13 companies including alleged Crypto.com breach.

October 2024

Crypto.com files lawsuit against the SEC after receiving Wells notice indicating pending enforcement action.

December 2024

Crypto.com drops its lawsuit against the SEC.

2 March 2025

Crypto.com submits governance proposal on Cronos blockchain to reissue 70 billion previously burned CRO tokens. Community vote shows 77.97% against, but proposal passes due to Crypto.com-affiliated validators controlling ~70-80% of voting power.

25 March 2025

ZachXBT publicly accuses Crypto.com of CRO supply manipulation, calling the token reissuance 'no different from a scam' and conduct 'borderline fraud.'

27 March 2025

SEC formally closes its investigation into Crypto.com with no enforcement action filed.

September 2025

Bloomberg publishes investigation revealing Crypto.com's 2023 Scattered Spider data breach was not publicly disclosed to affected users.

19 March 2026

Crypto.com announces 12% workforce reduction citing enterprise AI integration pivot.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (5 events).

model: claude-sonnet

generated: 5/4/2026, 2:54:11 AM

last updated: 8/29/2026, 1:35:52 AM

6 views

avoid.net — verified advice for a post-truth world