Reported exploit of about $26.1 million in bitcoin and ether
FixedFloat was reported in February 2024 to have lost about $26.1 million in bitcoin and ether in an exploit. According to a security firm's analysis, the attacker moved the funds through other no-KYC services, and the root cause was never publicly disclosed in detail. The service resumed operation afterwards. No evidence was found in the sources reviewed that customer swaps in progress were left unpaid as a result.
This entry summarises a public report and links to it. It is a record of what was reported, not a finding of wrongdoing. If you represent FixedFloat, you can
claim the listing and respond here. To correct an error, send a correction.
The public event log of the directory kycnot.me recorded that between 8 June and 8 August 2026 FixedFloat suspended orders funded from a specific large exchange and required verification before processing or refunding them. FixedFloat's terms allow it to suspend an order where suspicious activity is detected, carry out KYC and source-of-funds procedures and extend processing by up to two months. The number of users affected and the amounts involved were not stated.
