Skip to main content
AVOID.NET

M2 Exchange

avoid.net/m2-exchange→51/100·100% conf.
[✓ FACT-CHECKED]· reviewed once · last review 1 Nov 2026[src:defillama]

Last changed 2026-11-01 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →

Why this score
Every page starts at65
Concerns that are not fraud-7.6
Incidents it suffered (e.g. hacks)-12
Problems around it, caused by others-1.6
Long-running+2
Regulated+5
Sum51

Score: 51/100 (kept between 0 and 100)

How scoring works →

Page reliability: Fact-checked 2026-11-01 · 4 of 5 claims confirmed · 1 need better sources

anchored·4b19WN…93HL

Summary

M2 Exchange is an Abu Dhabi-based centralized cryptocurrency exchange licensed by the ADGM FSRA that suffered a $13.7 million hot wallet breach on October 31, 2024, attributed to an access control vulnerability spanning Bitcoin, Ethereum, and Solana. The exchange says it covered all customer losses from company reserves, though the lack of a public post-mortem, proof of reserves or independent verification, and leadership turnover raise unresolved transparency questions.

Connected Entities

9 entities · 60 linked investigations
Organizations
□Kraken65□Ethereum□Bitstamp□Solana□ZachXBT□M2
Exchanges
△M2 Exchange
Tokens
♦Bitcoin
Wallets
◇EKko14…LQoL
Relationships
  • Ethereum→mentioned with→Bitcoin(60%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • ZachXBT→mentioned with→Bitcoin(65%)
  • ZachXBT→mentioned with→Kraken(60%)
  • Bitstamp→mentioned with→Bitcoin(75%)
  • M2→mentioned with→Solana(70%)
  • M2→mentioned with→ZachXBT(70%)
  • M2→mentioned with→Kraken(60%)
  • M2→mentioned with→Bitcoin(70%)
  • M2→mentioned with→Ethereum(80%)
  • + 8 more
Have evidence about M2 Exchange?

Timeline(9 events)

August 2023

ADGM FSRA grants M2 Limited and M2 Custody Limited Financial Services Permission to operate an MTF and custody service in Abu Dhabi.

October 2023

M2 Exchange publicly launches retail and institutional services, initially offering BTC and ETH trading with AED fiat pairs.

November 2023

M2 receives ADGM license from the FSRA, recognized as a regulated Multilateral Trading Facility and custodian.

adgm.com

October 2024

Stefan Kimmel steps down as CEO and moves to the M2 Board of Directors; Saadeddine Zaher appointed CEO.

October 2024

Attacker exploits hot wallet access control vulnerability at approximately 3:16 AM (GMT+4), draining ~$13.7M across Bitcoin, Ethereum, and Solana. ZachXBT and Cyvers publicly identify suspicious transactions.

cryptoslate.com

October 2024

M2 states it detected the breach and responded within 16 minutes (by 3:32 AM); exchange covers all customer losses from company reserves and states services are restored.

fxleaders.com

November 2024

M2 officially announces the breach resolved and all affected customer funds fully restored from reserves (announcement dated 1 November 2024), states cooperation with UAE legal and regulatory authorities, enhanced security controls and engagement of law enforcement.

protos.com

November 2024

On-chain analysts confirm approximately $10 million in ETH remains unmixed in the attacker's consolidation wallet; no attacker identified.

2025

James Greenwood, former CTOO of Bitstamp, named CEO of M2, marking a second CEO transition within the platform's first eighteen months.

Provenance & Audit Trail

Decision Log

  • #5review reviseRecorded on Solana ✓11/1/2026, 11:16:51 PM
    slot 464273723 · hash DTDhN4pBDE1oiJPgsCUC7XBeapTydAbZNt4pUHkGMCNF
  • #4reviewRecorded on Solana ✓11/1/2026, 11:16:51 PM
    slot 464273718 · hash BAFF897nqCMLWKHRiBw2wd9gjeNgwSyyg9HBz9cXGKq7
  • #3rescore-2Recorded on Solana ✓11/1/2026, 11:15:45 PM
    slot 464273419 · hash 3hjmtHAFq7GXfCQkcGLkSRCWARbohhEWiY6He5mNBMt5
  • #2rescore+15Recorded on Solana ✓10/10/2026, 6:44:44 PM
    slot 455364455 · hash FAaJ6xHMxFQPF2XZjwBHDGgzkeEn5c1oPjZD6gLacKnV
  • #1publishRecorded on Solana ✓5/20/2026, 4:09:21 AM
    slot 420910772 · hash 44ZcJojr3oLvdZcUjvkG34ZcQyouM9Mpw8PWdr7QuVCh

This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 10 of 13 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-015 claims checked0 corrections pending0 applied⛓ anchoredSee findings →

model: claude-code-merge-writer

generated: 5/4/2026, 2:54:27 AM

last updated: 11/1/2026, 11:16:52 PM

5 views

avoid.net — verified advice for a post-truth world