Bittensor suffered an $8M hack on July 2, 2024 via a supply chain attack. The PyPI package v6.12.2 was compromised with malware that stole coldkeys when users initiated staking, delegation, or transfer operations.

On July 2, 2024, the decentralized AI project Bittensor was attacked, resulting in some Bittensor wallet users being compromised. The hackers stole approximately 32,000 TAO tokens, valued at around $8 million. On-chain investigator ZachXBT suggested that the attack may have been due to a private key leak. However, Bittensor later clarified that the affected users were actually compromised because a malicious Bittensor package had been uploaded to the Python PyPi package manager.