← Incident library

· data exposure · data · cost

Crypto treasury key exposure incident

Unnamed: a founder-run crypto agent project · finance agent

What happened
A crypto project’s wallet-connected agent exposed its hot-wallet private key in public places while managing a small project treasury. Its creators cut its internet access on 8 February and said it would need a security redesign.
Impact
About $2,100 lost (reported).
What would have caught it
Keep signing keys out of anything the agent can read. Limit treasury balances and require a separate signer for transfers.
Sources

Report a correction

Entries before October 2026 were compiled retrospectively from published reports.