Hackers exploited a vulnerability in Bitrue's withdrawal risk-control second-review process, bypassing security checks to drain 9.3M XRP and 2.5M ADA from the hot wallet.

At approximately 1am June 27 (GMT+8), a hacker exploited a vulnerability in Bitrue's Risk Control team's 2nd review process to access the personal funds of about 90 Bitrue users. The hacker used what they learned from this breach to then access the Bitrue hot wallet and move 9.3 million XRP and 2.5 million ADA to different exchanges.