Crypto Sleuth ZachXBT Demands Answers from BitoPro After $11.5M Hot Wallet Hack

Another day, another crypto exchange with a ’hot’ mess on its hands. Blockchain investigator ZachXBT has publicly called out Taiwan-based BitoPro after attackers drained $11.5 million from its hot wallet—because nothing says ’secure’ like keeping eight figures in internet-connected storage.

The breach raises familiar questions about exchange security practices. While cold wallets exist for a reason, some platforms still treat user funds like they’re playing fast-casino with house money. BitoPro now joins the growing list of exchanges learning this lesson the hard way.

ZachXBT’s public shaming might actually work—transparency cuts deeper than PR-speak when millions vanish. Meanwhile, traders are left wondering if their preferred platform will be next to make the ’how not to secure crypto’ hall of fame.

What the on-chain data shows

According to ZachXBT’s Telegram post, the funds were drained from BitoPro’s hot wallets across several blockchains. Ethereum, Tron, Solana, and Polygon were all involved. The stolen assets were sold through decentralized exchanges, then laundered through a mix of Tornado Cash, Thorchain, and Wasabi Wallet.

Some of the wallet addresses shared by ZachXBT include:

• 0x2453933c98b6e55397103f7c1081626e0a02d2c9
• 0x454cf3892a949c94569ab2663090ecdca811a6f0
• Tron address: TROLEONiiod5m8TSdmSR4iW17yQCfc2YJV
• Bitcoin address: bc1qcwzxklr3tr7zjhvql7pqtg57rkvm55vcz8ydul

These are linked to the suspicious flows that occurred on May 8. The pattern is typical of post-hack laundering methods, where funds are quickly moved, swapped, and masked to avoid detection.

No official response from BitoPro

What has made things worse is the total lack of communication. Despite the severity of the incident, BitoPro has not confirmed or denied anything. Users were only told the platform was undergoing “maintenance” on the day of the hack.

Since then, BitoPro has gone back to posting regular marketing content, including reward campaigns and trading events. But it hasn’t said a word about the suspicious outflows. There’s been no warning for users, no explanation about what happened, and no sign that any internal investigation is underway.

Why is this important

If what ZachXBT says is true, this might be one of the biggest crypto exchange hacks this year. But the problem isn’t just how much money was stolen. The bigger issue is that the exchange has stayed silent.

People put their money in exchanges because they trust them, and that trust comes from being open and honest. According to ZachXBT, BitoPro likely knew something went wrong on May 8, yet said nothing publicly. Weeks later, there’s still no update.

The complete lack of communication on X or Telegram has only made the situation look worse.

What users should consider

Anyone using BitoPro should proceed with caution. Until BitoPro comes forward and explains what really happened, users should consider pulling out their funds or limiting how much they keep on the platform.

ZachXBT, known for his reliable investigations into crypto hacks, has already shared the wallet addresses involved and mapped out exactly how the stolen funds were moved and laundered across blockchains.

If BitoPro keeps quiet, it’s going to lose whatever trust it still has.

This isn’t just about the money. It’s about how the exchange is handling the situation. When something goes wrong, users deserve clear answers, not silence.

Right now, there has been no official update from BitoPro. Nothing on X. Nothing on Telegram. The community is still waiting.

Also Read: Cetus Moves $162M to Secure Wallet After $223M Hack on Sui