Share this article
Bitcoin Mining Pools Targeted in Wave of DDOS Attacks
A number of bitcoin mining pools around the world have been hit by a recent string of DDOS attacks.
By Stan Higgins
Updated Sep 11, 2021, 11:36 a.m. Published Mar 12, 2015, 6:54 p.m.
Make us preferred on Google
AntPool, BW.com, NiceHash, CKPool and GHash.io are among a number of bitcoin mining pools and operations that have been hit by distributed denial-of-service (DDOS) attacks in recent days.
The incidents appear to have begun in the first week of March. For example, on 11th March, AntPool owner Bitmain sent an email to customers disclosing the DDOS attacks and advising external pool users to set up failsafe pools in the event of an outage.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
According to many of the companies affected by the incidents, those behind the attacks demanded payment in bitcoin in return for stopping the attacks.
alerted customers via its official blog to possible service disruptions owing to DDOS attacks, but did not say whether or not a ransom notice had been sent. Other pools took to Bitcoin Talk to warn users about the DDOS attacks.
operator CEX.io suggested that affected pools are seeing escalating DDOS threats, and said that the source of recent attacks on its pool came with increasing ransom demands.
A spokesperson for CEX.io told CoinDesk:
“The attack has been conducted by a hacker who has already DDOSed CEX.IO in October, 2014. Previously, he demanded 2 BTC for stopping the attack. This time, the payment has been raised to 5 to 10 BTC.”
At least one other mining pool, NiceHash, also reported sustained DDOS attacks last fall.
The alleged source of the DDOS attacks, operating under the name DD4BC, is believed to be behind a number of attacks on digital currency websites and services in the past year.
Incidents tied to DD4BC include an attack last year on the digital currency exchange Bitalo that resulted in the posting of a 100 BTC bounty. Following the recent DDOS threats, Bitmain contributed an additional 10 BTC to the bounty.
Disruptions likely to continue
Affected pools say they have moved to boost in-house defense mechanisms in light of the attacks, but some have warned that future outages may likely occur. Bitmain said that its other services, including the cloud mining platform HashNest, may also be affected in the coming days.
Operators that responded to press queries say they have refused to pay the ransoms and will continue keeping their pools open despite the risk of future DDOS attacks.
Some of the pools have conceded that resolving the situation will be difficult owing to the capabilities believed to be possessed by the source of the attacks.
Bitmain’s Yoshi Goto noted that the attacks appear to be systematic and acknowledged that it remains unclear when the situation will be completely resolved.
“It is a cat and mouse game now but we will do our best,” he said.
CoinDesk will continue monitoring the developments and post updates as they become available.
More For You
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
What to know:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
More For You
Cathie Wood’s ARK Invest files for two crypto index ETFs tied to CoinDesk 20
One proposed fund will attempt to exactly mimic the CoinDesk 20, but the other would track the index, excluding bitcoin.
What to know:
- ARK Invest has filed with U.S. regulators to launch two cryptocurrency ETFs tracking the CoinDesk 20 index.
- One proposed fund would track the CoinDesk 20, which provides exposure to major tokens, including bitcoin, ether, solana, XRP, and cardano. The other would track the same index, but exclude bitcoin, by pairing long index futures with short bitcoin futures.
- The funds, which would list on NYSE Arca if approved, aim to offer diversified crypto exposure without direct token custody and follow similar, still-unapproved crypto index ETF proposals from WisdomTree and ProShares.
Top Stories
