Bitfinex suffered a security breach when an attacker compromised hot wallet private keys, stealing 119,756 bitcoins (~$72 million). The exchange halted trading and withdrawals while investigating.

Bitfinex suffered a cyber attack in August 2016. 2,072 Bitcoin transactions were transferred out without Bitfinex's authorization, and then the funds were scattered and stored in 2,072 wallet addresses. Statistics show that Bitfinex lost a total of 119,754.8121 BTC. It was worth about $60 million at the time of the incident, or about $4.5 billion in today's prices. In February 2022, the Department of Justice recovered 94,000 bitcoins for Bitfinex, then valued at $3.6 billion. 34-year-old Ilya Lichtenstein and his wife, Heather Morgan, 31, were arrested in New York and charged with conspiracy to commit money laundering and fraud. on July 7, 2023, Bitfinex recovered more than $312,000 and 6,917 bitcoin cash (approximately $2,000) in stolen assets, which Bitfinex obtained from the U.S. Department of Homeland Security. On July 7, 2023, Bitfinex recovered more than $312,000 and 6.917 Bitcoin cash (approximately $2,000) in stolen funds, and Bitfinex obtained the assets from the U.S. Department of Homeland Security, with the recovered funds to be paid to the owner of the Restoration Rights Token (RRT).