Skip to main content
Sign in

Mixin Network

avoid.net/mixin-network→10/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5KaK61…s8gr

Summary

Mixin Network is a Hong Kong-based layer-2 cross-chain payment protocol that suffered the largest single crypto hack of 2023 when attackers compromised its cloud service provider's database and drained approximately $200 million in ETH, BTC, and USDT. The network remains operational but has only partially compensated users, the majority of stolen funds remain unrecovered, and a dormant attacker wallet moved funds to Tornado Cash in February 2026.

Connected Entities

1 entities · 1 linked investigation
Organizations
□Mixin Network
Relationships
    Also appears in
    Mixin Network·28

    Connected Through

    1 shared actor · 1 investigation

    Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

    Have evidence about Mixin Network?

    Timeline(9 events)

    November 2017

    Feng Xiaodong establishes the Mixin blockchain team in Hong Kong with fewer than 20 people.

    23 September 2023

    Attacker compromises the database of Mixin Network's cloud service provider; approximately $200 million in ETH, BTC, and USDT drained via 10,000+ unauthorized withdrawal transactions.

    25 September 2023

    Mixin Network publicly discloses the breach, suspends all deposits and withdrawals, and contacts SlowMist and Google for investigation support.

    25 September 2023

    Founder Feng Xiaodong holds live briefing; announces 50% immediate stablecoin repayment and 50% via future bond tokens (MDT).

    26 September 2023

    Mixin offers attacker a $20 million bug bounty for return of stolen funds. Offer is not accepted.

    26 September 2023

    Elliptic, Merkle Science, and Lookonchain publish on-chain analysis confirming asset breakdown: 59,807 ETH, 891 BTC, 23.57M USDT. Attacker immediately swaps USDT to DAI on Uniswap.

    February 2024

    Mixin Kernel officially launches Mixin Debt Token (MDT) in three tranches (MDTu, MDTe, MDTb) as the mechanism for the 50% deferred repayment.

    October 2025

    Mixin provides repayment update: MDTu (~$23 million) targeted for full repayment by September 2026; no timeline disclosed for MDTe or MDTb.

    12 February 2026

    Dormant attacker wallet moves 2,005 ETH ($3.85 million) through three newly created wallets to Tornado Cash — first movement of stolen funds in over two years. Remaining balance: approximately 57,849 ETH and 891 BTC.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain17 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 17 of 21 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:38 AM

    last updated: 8/30/2026, 5:14:09 AM

    avoid.net — verified advice for a post-truth world