On Thursday, the Shanghai-based blockchain platform Mixin Network reported a major security breach that resulted in losses of nearly $200 million. This startling development is yet another example of the vulnerability of digital currency and blockchain networks — and their users who have been put at risk by the hackers.
1. Massive Hack in Mixin Network Leads to Loss of $200M
On November 26th, the blockchain-based, cross-chain assets exchange Mixin Network suffered a massive hack. As a result, attackers managed to steal close to $200 million worth of cryptocurrency in different assets, including Bitcoin and various ERC-20 tokens.
The malicious attack exploited a bug in Mixin’s system that enabled money transfers without double-checking the recipient’s address. Attackers continued to take advantage of this loophole through thousands of wallets for a period of five hours.
The extent of damages and losses are still under investigation. According to a recent statement from the Mixin Network, most stolen funds were related to the ERC-20 tokens and Bitcoin, whereas “only a small amount” of stolen funds were related to MIX, its native token.
2. Vulnerabilities Identified in Mixin Network Network Technology
Mixin Network is an innovative blockchain network that has seen an explosive growth in its userbase in recent years. Despite this growth, there are still a number of vulnerabilities that have been identified in the network’s technology, which could pose a risk for users.
Insecure Storage of Keys
One of the key vulnerabilities identified in the Mixin Network is the insecure storage of keys used for transaction authentications and digital signature. Mixin Network has not yet implemented a system by which users can securely store their keys, leading to the risk that these keys could be stolen by hackers if the network is hacked.
Scalability Issues
Mixin Network also has scalability issues which limit the number of transactions that the network can process in a certain period. This can lead to lags in the network, causing a delay in users’ transactions. For some applications, such as real-time games, scalability issues can be extremely disruptive and create a negative experience for users.
Lack of Transparency
The Mixin Network also suffers a lack of transparency regarding its governance and consensus mechanisms. Unlike some other blockchains, the Mixin Network is not open-source, leaving users with limited insight into how transactions are managed and approved. This lack of transparency could lead to users losing their funds if the network were to be compromised.
3. How Companies and Consumers Can Protect Against Similar Losses
For companies, the primary step for preventing losses like the one in the example lies in the establishment of secure data protocols. All data should be encrypted before being stored, even if only temporarily, and a cloud-based backup system should be utilized. Employee oversight for any transfers of data should be standard as well.
When it comes to the consumers whose data have been breached, there are several important steps they should take. They should ensure the passwords they use are complex and unique, and they should also avoid entering confidential information on unsecured sites or links. They should also enable two-factor authentication wherever possible.
For companies and consumers alike, all software should be kept up-to-date with the most secure versions available, as well as installation of firewalls that will provide extra protection from malicious threats. Companies should also have incident response plans in place, so that in the event of a breach, they are prepared to respond quickly and appropriately.
- For Companies:
- Establish secure data protocols
- Encrypt data before stored
- Utilize cloud-based backup system
- Employee oversight for any data transfers
- For Consumers:
- Ensure passwords are complex and unique
- Avoid entering confidential information on unsecured sites or links
- Enable two-factor authentication where available
- For All:
- Keep all software up-to-date with the most secure versions available
- Install firewalls for enhanced security
- Establish incident response plans
Since the event of June 22nd, the crypto community has been shaken by the news of the Mixin Network hack. While Mixin Network and its team have remained transparent and continue to make strides towards improved security, the effects of the loss linger. As the story continues to unfold, the full impact of the hack remains to be seen.

