Share this article
Bitcoin DeFi Tool Alex Lab Loses $4.3M in Hack, Offers 10% Bounty for Stolen Funds
The ALEX team proposed a 10% bounty on the total stolen funds in exchange for the return of 90% of assets.
Updated May 15, 2024, 7:54 a.m. Published May 15, 2024, 7:51 a.m.
- The DeFi protocol said it had identified the attacker.
- The stolen funds have been frozen by major exchanges.
Bitcoin DeFi application ALEX Lab was drained of over $4.3 million in various tokens early Wednesday after a suspected private key compromise attacked its bridging service.
Security researchers CertiK said the attackers likely caught hold of a private key that controlled ALEX’s XLink bridge, a service that lets users transfer tokens between different blockchains. The hacker transferred over $300,000 worth of bitcoin , $3.3 million worth of stablecoins and $75,000 worth of Sugar Kingdom (SKO) tokens.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
ALEX developers confirmed the hack in an X post in early European hours, claiming they knew the identity of the attacker. The team offered them a 10% bounty for the return of 90% of the stolen funds.
“ALEX Lab Foundation has identified the individual responsible for the recent security breach and is offering a resolution through a bounty arrangement,” the developers said. “ALEX assures that upon compliance, there will be no further pursuit or law enforcement involvement. This offer stands until May 18 at 0800 UTC.”
Funds associated with the hacker have been frozen by major exchanges to prevent further misuse, the team said.
Private key compromises are among hackers’ most common attack vectors. Some of the biggest crypto hacks, such as Ronin’s $650 million drain in 2022 and Harmony’s $100 million hack in the same year, were the result of poor private key security.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Crypto Firm Tether Says It Wants to Take Over Italian Football Club Juventus
The issuer behind the most popular stablecoin said that if the bid succeeds, it prepares to invest $1 billion in the football club.
What to know:
- Tether said it aims to take over popular Italian football club Juventus FC.
- The firm proposed to acquire Exor's 65.4% stake in an all-cash offer, and intends to make a public offer for the rest of the shares.
- Tether reported net profits exceeding $10 billion this year, while its flagship token USDT is the world's dominant stablecoin with a $186 billion market capitalization.
Top Stories
