Skip to main content
Sign in

Summary

M2 is a UAE-based cryptocurrency exchange licensed by the Abu Dhabi Global Market (ADGM) Financial Services Regulatory Authority, operating as a regulated Multilateral Trading Facility and custodian since late 2023. On October 31, 2024, the exchange suffered a $13.7 million hot wallet breach attributed to an access control vulnerability across the Bitcoin, Ethereum, and Solana networks. M2 subsequently reimbursed all affected customers from its own assets and stated it had engaged law enforcement and regulatory authorities.

Have evidence about M2?

Timeline(4 events)

2023-11-28

M2 receives ADGM license from the FSRA, recognized as a regulated Multilateral Trading Facility and custodian.

2024-10-31

M2 hot wallets drained of approximately $13.7 million across Bitcoin, Ethereum, and Solana networks at approximately 3:16 AM GMT+4. ZachXBT and Cyvers publicly identify suspicious transactions.

2024-10-31

M2 states it detected the breach and responded within 16 minutes (by 3:32 AM), implementing emergency controls.

2024-11-01

M2 officially announces the breach has been resolved, all affected customer funds fully restored from exchange reserves, and that law enforcement and legal authorities have been engaged.

Research Gaps

1 open · agent-resolvable

Heuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.

  • [med]
    unarchived sources

    Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

model: claude-sonnet

generated: 5/4/2026, 4:05:00 PM

last updated: 5/19/2026, 3:39:39 PM

avoid.net — verified advice for a post-truth world