Mudrex Learn logo

Why Users Lost Access to WazirX Understanding the $230M Hack

In July 2024, WazirX, one of India’s leading cryptocurrency exchanges, suffered a massive cyberattack that led to the loss of over $230 million in digital assets, impacting millions of users. This incident, one of the largest crypto thefts in India’s history, left users unable to access their funds, sparking widespread concern and frustration. 

But why did users lose access to their crypto on WazirX, and what does this mean for the future of crypto trading in India? In this blog, we’ll dive into the details of the WazirX hack, its causes, consequences, and recovery efforts.

What Happened During the WazirX Hack?

On July 18, 2024, WazirX experienced a security breach targeting one of its multisignature (multisig) wallets, resulting in the theft of approximately $230 million—nearly 45% of the platform’s total reserves. 

The attack compromised digital assets, including $100 million in Shiba Inu (SHIB) and $52 million in Ethereum (ETH), which were later sold on decentralized exchanges like Uniswap. This incident disrupted WazirX’s ability to maintain a 1:1 collateral ratio, forcing the platform to halt all trading and withdrawals to mitigate further losses.

The breach stemmed from a vulnerability in the multisig wallet managed through Liminal’s digital asset custody infrastructure. 

According to WazirX, a discrepancy between the data displayed on Liminal’s interface and the actual transaction payload allowed attackers to replace the payload, transferring wallet control to unauthorized parties. 

While Liminal denied any breach in its ecosystem, preliminary investigations suggest the attackers may have used phishing techniques and gained access to multiple private keys.

ALSO READ: 8 Flags that WazirX Users Completely Missed

Why Did Users Lose Access to Their Crypto?

The immediate aftermath of the hack saw WazirX implement a series of measures that restricted user access to their funds. Here’s why users lost access to their crypto:

  1. Suspension of Withdrawals and Trading: To prevent further unauthorized transactions, WazirX temporarily paused all Indian Rupee (INR) and cryptocurrency withdrawals, as well as trading activities, on July 18, 2024. This freeze was necessary to conduct forensic analysis and security audits but left users unable to access their portfolios.
  2. Loss of 45% of Assets: The hack wiped out nearly half of WazirX’s crypto reserves, valued at approximately $503 million before the attack. This significant loss impacted the platform’s ability to honor user balances fully, leading to restricted access to funds.
  3. Socialized Loss Strategy: WazirX proposed a controversial “socialized loss strategy” to distribute the $230 million loss equitably among all users. Under this plan, users could access only 55% of their crypto assets for trading or withdrawals, while the remaining 45% was converted to USDT-equivalent tokens and locked. This approach, inspired by past hacks like Mt. Gox and Bitfinex, meant all users, even those unaffected by the hack, faced reduced access to their funds.
  4. Frozen INR Balances: While WazirX’s INR-related entity, Zanmai Labs, was unaffected by the hack, about 34% of INR balances were frozen due to ongoing disputes and investigations by law enforcement authorities. This restricted users’ ability to withdraw fiat funds, adding to their financial strain.
  5. Restructuring and Moratorium: WazirX’s crypto operating entity, Zettai, filed for a moratorium under Singapore’s Insolvency, Restructuring, and Dissolution Act on August 27, 2024, to protect the platform from legal action during restructuring. The Singapore High Court granted a four-month moratorium, further delaying user access to funds as the platform explores recovery options.

Who Was Behind the WazirX Hack?

Preliminary investigations by blockchain analytics firms like Elliptic and Crystal Intelligence point to North Korean hackers, potentially affiliated with the Lazarus Group, as the likely culprits. The attackers employed sophisticated techniques, including:

  • Phishing and Key Compromise: Gaining unauthorized access to two of the six private keys required for the multisig wallet, possibly through phishing.
  • Chain Hopping and Tornado Cash: Moving stolen funds across multiple blockchains and using Tornado Cash, a decentralized mixing service, to obscure transaction trails.
  • Pre-Attack Planning: Blockchain analysis indicates the attackers prepared for the assault eight days prior, fragmenting transactions to evade detection.

These tactics highlight the advanced nature of the attack, raising concerns about the security of centralized crypto exchanges.

How Has WazirX Responded to the Crisis?

WazirX has taken several steps to address the hack and restore user trust, though challenges remain:

  1. Reporting and Collaboration: WazirX filed complaints with the Indian police, Financial Intelligence Unit (FIU) India, and CERT-In, and reached out to over 500 exchanges to block the attacker’s wallet addresses.
  2. Bounty Programs: The platform launched a $23 million bounty program to recover stolen assets, offering up to $10,000 in USDT for actionable intelligence.
  3. Recovery Plans: WazirX proposed launching a decentralized exchange (DEX) and a recovery token to provide users with potential returns. The DEX aims to give users greater control over their assets, while the recovery token would represent a pro-rata share of recovered funds.
  4. CoinSwitch Cares Program: Rival exchange CoinSwitch introduced a ₹600 crore recovery program for WazirX users, offering sign-up bonuses, referral rewards, and revenue redistribution to help users recoup losses.
  5. Restructuring Efforts: WazirX is exploring partnerships, capital injections from “white knight” investors, and profit-sharing from new revenue-generating products to compensate users. The restructuring process is expected to continue until at least February 2025.

Despite these efforts, WazirX has faced criticism for slow updates, lack of transparency, and the socialized loss strategy, which many users view as unfair. A legal advisor from Kroll, working with WazirX, estimated that users might recover only 55–57% of their funds, further fueling discontent.


Impact on WazirX Users and India’s Crypto Ecosystem

The WazirX hack affected approximately 4.4 million users, many of whom had invested significant savings in crypto during the 2021 bull run. Stories of financial hardship have emerged, with users like Charan from Andhra Pradesh losing nearly ₹30 lakh and Anuj Sharma from Mumbai unable to access ₹35 lakh in holdings. The inability to trade or withdraw funds during Bitcoin’s 2024 surge to $75,000 added to users’ frustration.

India, ranked first in global crypto adoption by Chainalysis, faces a setback in its crypto ecosystem. The hack has highlighted the need for stronger regulatory frameworks and robust security measures, especially as India’s crypto sector remains largely unregulated despite a 30% tax on capital gains and 1% TDS on transactions.


What Can Users Do to Protect Their Crypto?

The WazirX hack underscores the risks of centralized exchanges. Here are steps users can take to safeguard their crypto:

  • Enable Two-Factor Authentication (2FA): Use 2FA on all exchange accounts to add an extra layer of security.
  • Diversify Investments: Spread assets across multiple platforms to reduce risk from a single point of failure.
  • Stay Informed: Monitor exchange announcements and security updates to respond quickly to potential threats.

ALSO READ: How to Secure your Crypto

The Road Ahead for WazirX and Its Users

WazirX officially resumed operations on October 24, 2025, marking the end of its 16-month shutdown following the $230 million hack. The Singapore High Court approved the exchange’s restructuring plan in October 2025, with over 95% of creditors supporting the recovery scheme. This approval has enabled WazirX to restart trading and begin the process of compensating affected users.

The relaunch has introduced several key features designed to restore user confidence and rebuild the platform. Trading operations are being rolled out in phases over four days, with approximately 25% of tokens being enabled each day until full functionality is achieved by October 27, 2025.

To address the security vulnerabilities that led to the original hack, WazirX has partnered with BitGo, a leading US-based digital asset custody provider, to implement institutional-grade, insured custody solutions. This partnership aims to provide enhanced security measures and rebuild user trust through world-class custody standards.

The recovery process for affected users is now underway through a structured approach. WazirX has committed to initiating token distributions to creditors within 10 business days of the relaunch. The company has also introduced Recovery Tokens (RTs) as part of its innovative compensation mechanism. These tokens are issued on a pro-rata basis to affected users and can be purchased back by the platform using recovered assets and future profits generated from operations.

Under the recovery scheme, users can expect to receive approximately 85% of their original balances through the initial distribution and Recovery Token system. The remaining recovery depends on WazirX’s ability to generate profits from its operations and recover stolen assets. Recovery Token purchases will occur at three-month intervals, provided the platform achieves net recoveries of at least $10 million during each period.

The exchange’s restructuring has been supervised by the Singapore High Court, providing legal framework and oversight for the recovery process. This court-supervised approach represents one of the fastest restructuring processes in the global crypto industry, despite the platform suffering one of the largest cyberattacks in the sector’s history.

For users, the relaunch represents both opportunity and cautious optimism. While the platform has resumed operations with enhanced security measures and a clear recovery plan, questions remain about the long-term viability and the complete recovery of lost funds. The success of WazirX’s comeback will depend on its ability to rebuild trust, maintain security standards, and generate sufficient revenue to support ongoing Recovery Token purchases.

Conclusion

The WazirX hack of July 2024 remains a watershed moment for India’s cryptocurrency ecosystem, but the exchange’s successful relaunch in October 2025 demonstrates the possibility of recovery even after devastating setbacks. Through a court-supervised restructuring process and innovative Recovery Token mechanism, WazirX has established a new model for crypto exchange recovery that balances immediate user needs with long-term asset recovery prospects.

As crypto markets continue to mature globally, the WazirX incident and its resolution offer valuable lessons about the importance of robust security infrastructure, transparent communication, and structured recovery processes. For Indian crypto users, the successful restructuring provides hope that proper legal frameworks and innovative recovery mechanisms can protect investors even in worst-case scenarios.

However, the crypto landscape remains inherently risky, and the WazirX incident underscores the critical importance of diversifying holdings across multiple platforms and maintaining personal security practices. While WazirX has implemented enhanced security measures through its BitGo partnership and rebuilt its platform with institutional-grade standards, users should continue to exercise caution and implement personal security measures when trading cryptocurrencies.

For those seeking a secure platform to continue their crypto journey, platforms that prioritize regulatory compliance, security-first architecture, and transparent operations remain essential. The crypto industry’s evolution toward better security standards and regulatory frameworks, accelerated by incidents like the WazirX hack, ultimately benefits all users by creating safer and more reliable trading environments for digital asset investments.

Want real-time market updates, expert insights, and trading discussions? Join the Mudrex Official Telegram Community now and stay ahead of the crypto market!

Leave a Reply

Your email address will not be published. Required fields are marked *

Get 100 ₹ CashBack on First Future Trade
Trade Crypto Futures at the Lowest Fees in India
Get 100 ₹ Cashback on First Future Trade
Get 100 ₹ CashBack on First Future Trade
One Click Away from Better Crypto Decisions
One Click Away from Better Crypto Decisions
One Click Away from Better Crypto Decisions
One Click Away from Better Crypto Decisions
Get 100 ₹ CashBack on First Future Trade
Trade Crypto Futures at the Lowest Fees in India
Get 100 ₹ Cashback on First Future Trade
Get 100 ₹ CashBack on First Future Trade
One Click Away from Better Crypto Decisions
One Click Away from Better Crypto Decisions
One Click Away from Better Crypto Decisions
One Click Away from Better Crypto Decisions