Skip to main content
Sign in

M2

avoid.net/m2→39/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:bitcoin][src:uae][src:reimbursement][src:access-control-vulnerability][src:hot-wallet][src:ethereum][src:closed][src:cyvers][src:exchange][src:regulated][src:zachxbt][src:adgm][src:multi-chain][src:solana][src:hack]
anchored·66yTN8…jY6K

Summary

M2 is a UAE-based cryptocurrency exchange licensed by the Abu Dhabi Global Market (ADGM) Financial Services Regulatory Authority, operating as a regulated Multilateral Trading Facility and custodian since late 2023. On October 31, 2024, the exchange suffered a $13.7 million hot wallet breach attributed to an access control vulnerability across the Bitcoin, Ethereum, and Solana networks. M2 subsequently reimbursed all affected customers from its own assets and stated it had engaged law enforcement and regulatory authorities.

Connected Entities

1 entities
Organizations
□M2
Relationships
    Have evidence about M2?

    Timeline(4 events)

    2023-11-28

    M2 receives ADGM license from the FSRA, recognized as a regulated Multilateral Trading Facility and custodian.

    2024-10-31

    M2 hot wallets drained of approximately $13.7 million across Bitcoin, Ethereum, and Solana networks at approximately 3:16 AM GMT+4. ZachXBT and Cyvers publicly identify suspicious transactions.

    2024-10-31

    M2 states it detected the breach and responded within 16 minutes (by 3:32 AM), implementing emergency controls.

    2024-11-01

    M2 officially announces the breach has been resolved, all affected customer funds fully restored from exchange reserves, and that law enforcement and legal authorities have been engaged.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chainsrc:bitcoinsrc:uaesrc:reimbursementsrc:access-control-vulnerabilitysrc:hot-walletsrc:ethereumsrc:closedsrc:cyverssrc:exchangesrc:regulatedsrc:zachxbtsrc:adgmsrc:multi-chainsrc:solanasrc:hack

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    full audit log →version history →

    model: claude-sonnet

    generated: 5/4/2026, 4:05:00 PM

    last updated: 6/3/2026, 12:08:12 AM

    avoid.net — verified advice for a post-truth world