Skip to content
Incident record

DMM Bitcoin Unauthorised Outflow, May 2024: What Happened & What to Check

Japanese exchange DMM Bitcoin lost 4,502.9 BTC in an unauthorised outflow. The company later announced it would wind down and transfer accounts.

Resolved Discovered Disclosed
Share X in @
Schematic of the DMM Bitcoin incident showing the key compromise stage as the failure point.
Schematic of the DMM Bitcoin incident showing the key compromise stage as the failure point.

At a glance

AFFECTED ENTITY
DMM Bitcoin
CHAIN(S)
Bitcoin
ATTACK CLASS
Key compromise
REPORTED LOSS
4,502.9 BTC(DMM Bitcoin, 31 May 2024)
OFFICIAL RESPONSE
bitcoin.dmm.com

Covered, then closed

DMM Bitcoin’s immediate response was to guarantee customer balances in full, with support from group companies, and to procure the equivalent BTC. From a customer’s point of view that is the best available outcome after a loss of this size.

The company subsequently announced it would cease operations and transfer customer accounts to another provider. Both facts belong in the record. An exchange can absorb a loss and still not survive it, and the second outcome affects customers in ways the first does not — account migration, changed terms, a different regulatory relationship.

What a customer can actually check

For any exchange, the verifiable questions are narrow but real: which regulator supervises it and under what registration; what it publishes about custody arrangements and reserves; and what its own status page says right now. Those are checkable. Assurances about internal key management generally are not, which is why concentration of holdings on any single venue is the risk a user can actually control.

Timeline

Append-only. Corrections are added as their own dated entry; earlier entries are never rewritten.

  1. DMM Bitcoin detects an unauthorised outflow of 4,502.9 BTC and restricts withdrawals and new account activity. DMM Bitcoin
  2. DMM Bitcoin announces it will wind down operations and transfer customer accounts to another provider. DMM Bitcoin

What to check

DMM Bitcoin published notices on its own site and to the Japanese Financial Services Agency. Those notices are the authoritative record of customer impact and of the subsequent wind-down.

Conisec does not host or link recovery, revocation or "checker" tools. After a public incident, attackers routinely seed exactly those links using the names of publications covering the story. Use the affected project's own official channel, linked above, and nothing else.

Sources

  1. DMM Bitcoin, Official notices (31 May 2024)

Not advice. This is a summary of published facts, not legal, tax or security advice. Verify against the primary sources linked above.

Last verified by Conisec Staff.