Bitcoin Depot Loses 50.9 BTC in Wallet Breach Revealed in SEC Filing

Highlights

• Bitcoin Depot lost $3.665 million after hackers breached internal systems and moved 50.9 BTC from wallets.
• The attack exposed gaps in settlement account security and raised concerns about internal controls.
• Regulators are tightening oversight on Bitcoin ATM operators due to rising fraud risks.

Bitcoin ATM operator Bitcoin Depot disclosed in an April 8 SEC filing that hackers stole 50.9 BTC worth about $3.665 million. The company said the breach occurred on March 23 after attackers gained unauthorized access to its internal IT systems.

The intruder obtained credentials linked to digital asset settlement accounts, which allowed direct movement of funds from company-controlled wallets. As a result, the attacker transferred Bitcoin without authorization and exited the system with the assets.

NEW: BITCOIN DEPOT HIT BY $3.7M BTC THEFT

Bitcoin ATM operator Bitcoin Depot has reported a $3.7 million theft following a security breach, in a recent SEC filing.

The Nasdaq-listed firm detected unauthorized IT system access on March 23. Attackers gained control of… pic.twitter.com/jSelwXSLNc

— BSCN (@BSCNews) April 9, 2026

Bitcoin Depot explained that attackers targeted internal systems and extracted credentials tied to its settlement operations. These accounts support the movement of crypto across the company’s ATM network and help maintain liquidity for customer transactions. Consequently, the breach directly affected wallets linked to internal settlement processes.

Following detection, Bitcoin Depot activated its incident response protocols and moved quickly to contain the breach. The company engaged external cybersecurity experts to investigate how attackers entered the system and whether they accessed additional infrastructure. At the same time, it notified law enforcement authorities, although it did not name the agencies involved.

Bitcoin Depot classified the incident as material to its operations and outlined several risks tied to the wallet breach. The company cited reputational damage, legal exposure, regulatory costs, and investigation expenses as key concerns. It also addressed financial recovery and stated that insurance may cover part of the losses. However, the company warned that any recovery may not fully offset the total financial impact.

Bitcoin Depot Faces Operational Strain After Wallet Breach Hits Core Systems

The company confirmed that customer-facing platforms continued to operate without disruption after the wallet breach. It also stated that user data and personal information remained secure and unaffected by the intrusion. Moreover, Bitcoin Depot has not issued a public statement beyond the SEC filing while the investigation remains ongoing.

The breach exposed weaknesses in systems tied to Bitcoin Depot’s internal settlement infrastructure. Attackers accessed credentials connected directly to accounts that support the company’s crypto movement and liquidity functions.

The company also brought in third-party cybersecurity experts to conduct a deeper forensic analysis and review system vulnerabilities. The BTC operator is reviewing its internal controls while external investigators assess how the breach unfolded.

Bitcoin Depot disclosed the breach at a time when regulators were already increasing scrutiny of its operations. The company has introduced stricter identity verification requirements for ATM transactions as part of its compliance efforts.

In March, Connecticut regulators suspended Bitcoin Depot’s money transmission license over fee violations. Authorities said the company exceeded the state’s 15% fee cap on 1,015 transactions. They also reported that 510 customers paid about $150,426 in excess fees.

Connecticut shuts down Bitcoin Depot operations as company braces for lower 2026 revenue outlook

• BTM operator faces mounting regulatory headwinds across states
• Declining revenue signals broader crypto ATM industry struggles

$BTC

— unhedged (@unhedgedx) March 18, 2026

Bitcoin ATM Operators Face Rising Security and Compliance Risks

The Bitcoin Depot wallet breach reflects broader risks facing Bitcoin ATM operators across the United States. Attackers often focus on operators that manage both physical cash systems and digital asset custody. Bitcoin ATM operators run infrastructure that connects cash-based transactions with digital wallet systems. Bitcoin Depot faced a similar security incident three years ago when attackers accessed personal data linked to about 58,000 users.

Authorities across the United States are tightening oversight of Bitcoin ATM operators through stricter compliance rules and fraud controls. Illinois Senator Dick Durbin proposed legislation that aims at reducing fraud linked to cryptocurrency ATMs. In addition, Bitcoin ATM closures increased in March last year as regulators pushed for tighter controls. Since early this year, about 666 machines have gone offline across the country under growing compliance pressure.