NiceHash
Summary
NiceHash is a Slovenian cryptocurrency mining marketplace founded in 2014 that allows users to buy and sell hashing power. In December 2017 the platform suffered one of the largest crypto exchange hacks of that year, with attackers stealing approximately 4,736 BTC (valued at roughly $64 million at the time) after compromising an employee's computer through a spear-phishing attack. The breach was subsequently attributed to North Korea's Lazarus Group, and NiceHash completed a full user repayment program in December 2020 after a three-year effort funded from operational revenue.
Connected Entities
1 entities · 10 linked investigations- + 1 more
Timeline(11 events)
2014-01-01
NiceHash founded in Ljubljana, Slovenia by Marko Kobal and Matjaz Skorjanc as a hashpower marketplace.
NiceHash Wikipedia2017-12-06
Attackers compromise a NiceHash engineer's computer via spear-phishing, gain access to the payment system, and drain approximately 4,736 BTC (approximately $64 million). NiceHash suspends all operations.
TechCrunch2017-12-07
NiceHash confirms the breach publicly. CEO Marko Kobal states that a compromised company computer was the entry point. Major news outlets report stolen amount ranging from $60 million to over $70 million.
CNBC2017-12-21
CEO Marko Kobal resigns. NiceHash relaunches its platform with redesigned payment infrastructure and enhanced security protocols.
Finance Magnates2018-02-02
NiceHash launches its formal Repayment Program, making an initial disbursement of 10% of owed balances to affected users, funded from platform fees.
CryptoNinjas2018-07-02
NiceHash announces that more than 55% of stolen funds have been returned to affected users through the Repayment Program.
CryptoNinjas2019-12-18
NiceHash pauses the Repayment Program after reaching 82% of total reimbursements, citing financial constraints and the need to maintain operational solvency.
Crypto Briefing2019-01-01
Matjaz Skorjanc (NiceHash co-founder) arrested in Germany on a U.S. extradition request related to pre-NiceHash Mariposa botnet and Darkode cybercrime forum charges.
Infosecurity Magazine2020-01-01
Skorjanc released after Germany and Slovenia both reject U.S. extradition request, citing double jeopardy protections.
NiceHash Wikipedia2020-12-16
NiceHash completes the final installment of its Repayment Program, returning all affected user balances to 100% of pre-breach levels — approximately three years after the original hack.
CoinGeek2021-02-17
The U.S. Department of Justice unseals an indictment charging three North Korean nationals (Jon Chang Hyok, Kim Il, Park Jin Hyok) as Lazarus Group members for a broad range of cyberattacks including the December 2017 theft of approximately $75 million from a Slovenian cryptocurrency company consistent with NiceHash.
U.S. Department of JusticeDecision Log
- hash: 8GBk82VGYSGmuDgvfQruXkFphxeEivJFBw92WRaTtPcg
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-5
generated: 5/30/2026, 12:59:37 PM
last updated: 5/30/2026, 12:59:42 PM
avoid.net — verified advice for a post-truth world