Attacker gained access to Altilly's hosting provider account via compromised API keys lacking 2FA. The attacker rebooted servers in rescue mode, created new system user accounts, deleted all backups across hosting and offsite services, and rendered encrypted wallets inaccessible. The exchange permanently shut down with no fund recovery.

The Altilly Exchange platform was attacked by legally authorized access. According to the official weighing, the attacker gained access to 30 BTC and 12,000 USDT and stole them while controlling the server.