Cryptocurrency exchange KuCoin, a platform for trading and exchanging digital assets, has, according to anonymous blockchain researcher ZachXBT, threatened to sue a client who was the victim of a hacker attack and tried to recover stolen funds.
What Exactly Was Presented to the Affected Client
In the notice sent, the platform warned the client: if he continues to demand compensation from KuCoin for the stolen assets and writes about it on social media, such publications may be regarded as false, misleading, defamatory, offensive, threatening, or otherwise unlawful statements.
They may serve as grounds for us to bring legal claims, as well as to exercise the rights and legal remedies available to us under applicable law.
This wording was cited by ZachXBT, who investigates cryptocurrency hacks and tracks the movement of funds on the blockchain.
How the Stolen Funds Were Linked to KuCoin Addresses
According to ZachXBT, the client’s assets were withdrawn after the attack using the Atomic Stealer malware. The incident occurred on August 18, 2025, and the amount of damage was about $250,000.
The researcher claims that the stolen funds were then laundered through accounts on KuCoin. For this, according to him, the attackers used purchased personal data and so-called mule accounts.
ZachXBT also provided the address from which he believes the theft was committed: 0x6368D06895b7becdcAC0806F438EfA653fE0a68D. In addition, he listed KuCoin deposit wallets where, according to his data, the stolen assets were sent:
- 0x6043b2d79670a417fc523213155812846e893dc7
- 0xa0fdb49aa589538d5622b92e9122727873558a13
- 0x4a4b5c7db9aa8355a5e5abbfc1926cd6b2d9f610
- 0xe7bb69f6c0ae0c1418bd86ec9697af9914d6875e
- 0x35d65ec360347f7dc41a929cc7ce9f2485a4f833
Why Claims Against the Exchange Caused a Stir
This is not the first episode in which ZachXBT has drawn attention to risks associated with KuCoin. Previously, he reported that from April 7 to 13, more than 50 people lost $9.5 million through a fake Ledger Live mobile app for iPhone.
According to him, unknown individuals withdrew funds on the Bitcoin, Tron, Solana, and Ripple networks, and then routed the stolen assets through at least 150 KuCoin addresses.
For the market, such a story is sensitive because any online digital currency exchange service relies on user trust. When cryptocurrency passes through deposit addresses of a major platform, not only basic operations with Bitcoin and Ethereum come to the fore, but also access control: authorization token, account verification, and monitoring of suspicious accounts. The larger the platform and the broader its audience, including users of margin trading services, the more noticeable the reputational risks. In the industry context, KuCoin is also associated with Singapore and one of the project’s founders, Eric Don.
{
“@context”: “https://schema.org”,
“@type”: “Article”,
“about”: [
{
“@type”: “Organization”,
“name”: “KuCoin”
},
{
“@type”: “Person”,
“name”: “Eric Don”
},
{
“@type”: “Place”,
“name”: “Singapore”
},
{
“@type”: “Thing”,
“name”: “cryptocurrency”
},
{
“@type”: “Thing”,
“name”: “margin trading”
},
{
“@type”: “Thing”,
“name”: “authorization token”
},
{
“@type”: “Thing”,
“name”: “bitcoin”
},
{
“@type”: “Thing”,
“name”: “ethereum”
}
]
}
