Indonesian crypto exchange Indodax has seemingly suffered an attack, with the hacker stealing over $20 million worth of crypto from hot wallets.

Cryptocurrency exchange Indodax (previously known as Bitcoin Indonesia) has allegedly suffered an attack after an unknown entity withdrawing tens of millions of dollars worth of crypto liquidity from the platform.

🚨SlowMist Security Alert🚨Indonesian crypto exchange @indodax suffered an attack a few hours ago, with the hacker stealing various tokens from hot wallets. The total loss is approximately $22 million💸. Below are the details of the losses⬇️ pic.twitter.com/r4i0rBbctJ

— SlowMist (@SlowMist_Team) September 11, 2024

In a Sept. 11 post on X, blockchain analytics firm SlowMist alarmed that the trading platform seemingly suffered an attack, with the hacker stealing around $22 million in various tokens from the exchange’s hot wallets. Analysts at Cyvers, another blockchain forensic firm, say the hackers have already swapped the stolen tokens to Ethereum (ETH), with on-chain data showing altcoins have also been converted into TRON (TRX), Polygon (POL), and Bitcoin (BTC).

Halo Member INDODAX,Kami ingin menginformasikan bahwa team security kami menemukan potensi indikasi keamanan pada platform kami. Saat ini, kami sedang melakukan pemeliharaan menyeluruh untuk memastikan seluruh sistem beroperasi dengan baik. Selama proses pemeliharaan ini,… pic.twitter.com/kYAc6ilERF

— indodax (@indodax) September 11, 2024

Following the reports, Indodax’s official page on X issued a post, saying its security team had discovered a “potential security issue on our platform,” adding that the platform is conducting “complete maintenance to ensure the entire system is operating properly.” The exchange has “temporarily” suspended access to the platform, reassuring users that their balance “remains 100% safe both in crypto and rupiah.” However, the specifics of the hack were not disclosed.

Founded in 2014 by Oscar Darmawan and William Sutanto, Indodax boasts over 4.3 million registered and verified members. The exchange also claims to have earned various certifications and permits from the Commodity Futures Exchange Supervisory Board and the Ministry of Communication and Information of the Republic of Indonesia.

Read more: The inside story of WazirX’s $235M hack and how it’s destroying users lives left without answers