Nigerian cryptocurrency investors have not been spared the growing wave of cyberattacks targeting digital asset platforms.
Patricia and Naira4Dollar are among Nigerian digital-asset platforms that have suffered security breaches involving stolen cryptocurrency.
Patricia, a Nigerian cryptocurrency trading platform, reportedly lost about $2m in a security breach that compromised its Bitcoin and naira assets, while Naira4Dollar lost approximately $15,000 worth of Bitcoin in an earlier attack.
The incidents highlight the security risks confronting Nigeria’s growing cryptocurrency market, as hackers steal billions of dollars from exchanges, digital wallets and decentralised finance platforms across the world.
Globally, cryptocurrency-related thefts amounted to approximately $14.69bn between 2023 and October 2026, according to figures compiled from industry incident trackers by THE WHISTLER.
Patricia disclosed its security breach in May 2023, but an investigation by technology publication TechCabal established that the attack actually occurred in January 2022. The platform subsequently suspended withdrawals while addressing the consequences of the breach.
Advertisement
Naira4Dollar suffered its attack in March 2016, when its Chief Executive Officer, Ejezie Sunday, discovered that approximately $15,000 worth of Bitcoin had disappeared from the company’s Blockchain.info wallet.
According to the incident account, the stolen Bitcoin had been purchased to replenish the company’s cryptocurrency reserves before being converted to Perfect Money. Efforts to stop the transaction after discovering the theft were unsuccessful.
Although the two Nigerian incidents fall outside the 2023–2026 reporting period, they demonstrate that local cryptocurrency platforms have faced security threats for years.
Global losses surge
According to DefiLlama’s incident database, cryptocurrency-related thefts reached approximately $8.7bn in 2026 alone as of November 1, across 325 recorded incidents.
Advertisement
The October 29 attack on Binance accounted for approximately $6.36bn, making it the largest incident recorded in the database.
In a security update published on October 30, Binance confirmed that its hot wallets had been compromised, resulting in unauthorised withdrawals across multiple blockchain networks.
The exchange said investigations had uncovered additional points of breach after initially suspecting that a compromised employee’s laptop was involved. It added that there was no evidence that wallet private keys had been leaked.
Binance pledged to absorb the financial impact rather than pass the losses to customers, disclosing that approximately $3bn of the stolen assets had been frozen through collaboration with law enforcement agencies, blockchain intelligence firms and other industry partners.
The company also said it had set aside more than $6.34bn to cover the affected assets.
The Federal Bureau of Investigation subsequently attributed the attack to North Korea’s TraderTraitor hacking group, which investigators said had been converting the stolen assets, primarily into Ethereum, to launder the proceeds.
Advertisement
The incident followed another major breach involving Bybit, which lost approximately $1.5bn in February 2025.
The attack, attributed to North Korean-linked hackers, involved the compromise of infrastructure used to approve transactions from the exchange’s Ethereum cold wallet.
Despite the scale of the breach, Bybit said it restored its customer asset backing to a 1:1 ratio within 72 hours.
According to blockchain intelligence company Chainalysis, global cryptocurrency thefts exceeded $3.4bn in 2025, with the three largest attacks accounting for 69 per cent of the year’s losses.
Other affected platforms included Japanese exchange DMM Bitcoin, which lost approximately $305m in May 2024, and Indian exchange WazirX, which suffered a breach involving more than $230m in July 2024.
Turkish exchange BtcTurk also lost approximately $55m in June 2024, while BingX suffered a breach involving between $43m and $44m in September of the same year.
In July 2025, Indian exchange CoinDCX lost approximately $44m in a security incident. The company disclosed another $15.99m loss in October 2026 involving old operational wallets previously compromised during the earlier incident.
CoinDCX said a failure in its automated deposit-sweeping system allowed funds to accumulate in vulnerable addresses. It added that the company absorbed the loss and credited affected customers.
Individual investors also exposed
Beyond exchange breaches, individual cryptocurrency holders have also become increasingly vulnerable.
Chainalysis estimated that hackers stole approximately $713m from individual cryptocurrency wallets in 2025, affecting at least 80,000 unique victims.
The attacks often involve compromised credentials, phishing, malicious applications and techniques designed to obtain access to private keys.
For Nigerian investors, the international pattern raises concerns about the security of digital assets held on both foreign and locally accessible platforms. However, available industry data do not establish the total amount lost by Nigerians specifically.
How the attacks can be prevented
Cybersecurity experts say cryptocurrency platforms must strengthen transaction verification and reduce the possibility of a single compromised device or employee authorising substantial withdrawals.
Steven Walbroehl, co-founder and Chief Technology Officer of blockchain security company Halborn, identified blind signing as a critical weakness in the Bybit attack.
During a February 2025 webinar hosted by Halborn and Merkle Science, Walbroehl explained how attackers exploited the transaction-signing process, allowing signatories to approve malicious transactions while seeing what appeared to be legitimate information.
Security specialists recommend combining multisignature wallets, offline storage, independent transaction verification, regular security audits and tighter employee access controls.
Google Cloud’s threat intelligence guidance also recommends distributing digital assets across multiple multisignature wallets and requiring geographically separated signatories to approve sensitive transactions.
The Open Worldwide Application Security Project similarly recommends that signatories independently verify transaction details on hardware devices rather than relying entirely on the interfaces displaying proposed transactions.
As cryptocurrency adoption expands, the growing financial consequences of security breaches are raising questions about how platforms protect customer assets, disclose incidents and compensate victims.
From a Nigerian perspective, Seun Dania, Chief Executive Officer of cryptocurrency platform TradeFada and an information security expert, said exchanges must strengthen internal controls by ensuring that no single employee has unrestricted access to customers’ funds or the authority to approve withdrawals independently.
He explained that cryptocurrency platforms should introduce multiple layers of transaction approval, independent verification and strict separation of responsibilities to prevent compromised accounts or insider access from resulting in stolen assets.
He said exchanges must establish security structures that make it impossible for one individual to move funds without additional authorisation, even when senior executives’ accounts are compromised.
However, Nigeria’s Securities and Exchange Commission has acknowledged its responsibility to protect investors participating in the cryptocurrency market, with its Director-General, Emomotimi Agama, saying regulators must scrutinise and regulate digital asset activities to safeguard users.
In a March 2026 interview with ARISE NEWS, Agama disclosed that the Commission deploys specialised tools to monitor cryptocurrency transactions and requires operators to register under the Investments and Securities Act 2025.
The SEC’s digital asset regulatory framework also requires exchanges to establish safeguards for customers’ funds, including multisignature arrangements and proper custody systems.
