Why security incidents matter for prices
Cryptocurrency systems hold large amounts of value in software and in custodial accounts, which makes them targets. When a major breach happens, prices can be affected for several reasons: direct loss of funds, loss of trust in a platform, forced selling by those affected, or fear that similar weaknesses exist elsewhere. The size of the price reaction varies widely, and sometimes there is very little.
This article describes how well-known incidents have shown up in market data. It is a description of history, not a guide to anything else, and the dates and amounts are approximate.
Three kinds of incident
Not every breach is the same, and the type often shapes the market reaction.
- Exchange or custodian breaches. Funds held by a company are stolen or lost. The affected platform may freeze withdrawals, and its customers carry counterparty risk.
- Protocol or smart contract exploits. A flaw in code lets an attacker drain funds from an application or token system. The loss falls on that protocol’s users and its token.
- Bridge and infrastructure attacks. Systems that move assets between blockchains hold large pools of funds and have been a frequent target.
A fourth category is theft from individuals through phishing or malware, which rarely moves market prices but is covered under wallet phishing.
Notable cases
Mt. Gox, 2014. In February 2014 the exchange Mt. Gox suspended withdrawals and then filed for bankruptcy protection, reporting that a large number of customers’ bitcoins were missing. It was then one of the biggest bitcoin exchanges. Bitcoin’s price fell and remained weak for a long period, though other factors were also at work.
The DAO, 2016. In June 2016 an attacker used a flaw in the code of a large Ethereum-based investment fund called The DAO to move a large amount of ether. The community responded with a contentious change to the blockchain in July 2016, which resulted in two chains: Ethereum and Ethereum Classic. The episode was both a price event and a debate about what blockchains should do after theft.
Bitfinex, 2016. In August 2016 the exchange Bitfinex reported a breach in which a large amount of bitcoin was taken from customer accounts. Bitcoin’s price dropped sharply on the news. The platform spread the losses across customers and later issued tokens to compensate them. Years later, authorities announced recoveries tied to the theft.
Ronin bridge, 2022. In March 2022 an attacker took a very large sum, reported at roughly 600 million US dollars at the time, from a bridge connected to a popular blockchain game. The effect on the broad market was limited, while the game’s own token and users were hit hard.
Bybit, 2025. In February 2025 the exchange Bybit reported the theft of a very large amount of ether, widely reported as about 1.5 billion US dollars, making it among the largest crypto thefts. Prices dipped, and the reaction was brief compared with some earlier episodes. The exchange said it would cover the loss.
What shows up in the data
Looking across such cases, a few patterns are often described, with the caution that each event also coincided with other news.
- The affected asset usually moves most. A protocol’s own token commonly falls more than the market, because holders may fear further losses.
- Market-wide effects depend on size and symbolism. A breach at a leading exchange, as in 2014, tends to affect confidence more than a loss at a small application.
- Reactions can be short. Some declines recover within days, others persist because the incident exposes a deeper problem.
- Recoveries are rare but possible. Funds are sometimes returned or traced, which can ease the reaction.
- Trust effects can outlast the loss. Platforms that suffer a breach often lose users even after compensation.
These are observations from a small number of events and should not be read as rules. A price drop after a hack is also not proof the hack caused it.
General protections
Understanding these events helps explain why custody choices matter.
- Be cautious about leaving large amounts on a platform that you do not control; exchange failures and counterparty risk explain the exposure.
- Look for clear information on how a platform secures funds, such as proof of reserves and independent audits, while remembering these are not guarantees.
- Be sceptical of new protocols promising high returns, since unaudited code is a common source of loss.
- Use strong security practices for your accounts, including two-factor authentication.
Cryptocurrency holdings can be lost to theft, and recovery is often impossible. Prices are volatile, and nothing here is financial, tax or legal advice.