M2 EXCHANGE

DESCRIPTION OF EVENTS

"M2 Global Wealth Limited is a registered Digital Asset Business and is regulated and authorised by the Securities Commission of The Bahamas."

"Boost your Crypto Portfolio Sign up now and start earning more"

"High-Yield Crypto Investments Maximize your earnings on M2 with up to 8% APR on your crypto"

"Invest in Over 40 Verified Crypto Assets Diversify your portfolio with curated crypto assets"

"Protect your assets with M2's state-of-the-art security features, including multi-layer authentication and advanced encryption." "Encounter top-tier security and reliability trading on M2. Our ADGM-licensed platform guarantees your assets' protection and compliance"

"Theft addresses holding stolen assets: • ETH: 0x968b6984cba14444f23ee51be90652408155e142 • BTC: bc1qu4kh7wa38xpkrp8frgxl4sak88wx0jug8n3vfj • SOL: EKko14NvgqdvNttUb8JjXkVGuUs6BTikjfN3hqW4LQoL"

"On October 31, 2024, at 3:16 AM (GMT+4), M2 experienced a cybersecurity incident involving $13.7 million, which was swiftly responded to at 3:32 AM (GMT+4)." "the attack had spread across ETH, BTC, and SOL chains"

"We would like to report that the situation has been fully resolved and customer funds have been restored. M2 has taken full responsibility for any potential losses, demonstrating our unwavering commitment to safeguarding our customers' interests. All services are now fully operational with additional controls in place.

We are dedicated to upholding the highest standards of security and compliance, and we are actively cooperating with relevant legal and regulatory authorities to ensure this matter is dealt with thoroughly and appropriately.

For further support, please contact the M2 Support Team."

"Welcome to the $13.7 million @M2Exchange house of horrors, where despite claiming they've caught their ghost, restless spirits still perform their midnight waltz."

"stolen USDT and SHIBA swapped to ETH immediately after the exploit."

"We would like to report that the situation has been fully resolved and customer funds have been restored. M2 has taken full responsibility for any potential losses, demonstrating our unwavering commitment to safeguarding our customers' interests. All services are now fully operational with additional controls in place."

M2 Exchange is a global cryptocurrency exchange targetting customers in the United Arab Emirates, and based in the Bahamas. On October 30th, 2024, wallets were drained across 3 chains. The company reported the issue as happening after it actually happened, and that they had resolved it within 16 minutes. The exchange has claimed that all customer assets will be fully covered.

Rekt - M2 Exchange - Rekt (Nov 4)
Telegram: Contact @investigations (Nov 4)
Security Update (Nov 4)
https://www.m2.com/en_AE/ (Nov 4)
https://www.m2.com/en_AE/adgm/ (Nov 4)
@CyversAlerts Twitter (Nov 4)
@hackenclub Twitter (Nov 4)

More case studies

1Inch Exchange DApp Lottie
Player Supply Chain Attack

Shoebill Finance BTC Market
Collateral Oracle Exploit