Updated: 22.03.2026
Cryptocurrency exchange Liquid Exchange reported that their platform suffered from a data leak, as a result of which attackers gained access to users’ personal information.
On words Exchange CEO Mike Kayamori, the attack has been identified and the team is already taking the necessary actions to reduce the damage. However, platform users are strongly advised to change their passwords, as they may become victims of phishing attacks in the future.
An investigation by Liquid Exchange revealed that the attackers gained domain access and account control after their hosting provider, responsible for one of their primary domains, mistakenly redirected them to the wrong destination. Thanks to this, cybercriminals were able to change DNS records and gain access to internal email addresses stored on the site.
It is not yet known whether the attacker accessed users’ personal documents such as residence, selfies and IDs submitted for KYC as the investigation is ongoing. However, access to the user database was still obtained. Some of this data includes encrypted passwords, names and addresses. This data could be sold on the dark web or used in a phishing campaign.
Liquid Exchange has now conducted a comprehensive analysis of the infrastructure and regained control over security. So far it is stated that the attackers did not gain access to client funds, since wallets based on MPC and cold cryptocurrency storage did not undergo any changes. This means that client funds are safe.
Risk Warning:
The information on this website is for informational and educational purposes only and does not constitute investment advice or financial recommendations. Cryptocurrencies and digital assets carry a high level of risk, including possible loss of capital. The editors are not responsible for decisions made based on the published materials. It is recommended that you conduct your own research (DYOR) before making any investment decisions.