Key Takeaways
- A cyberattack on March 23 resulted in the theft of 50.9 BTC (approximately $3.7M) from Bitcoin Depot’s corporate wallets
- Hackers compromised authentication credentials associated with the company’s digital asset settlement infrastructure
- No customer-facing systems, databases, or personal information were compromised in the incident
- Bitcoin Depot has preliminarily estimated losses at ~$3.665 million, with potential insurance coverage being evaluated
- Shares of BTM surged 15.6% to reach $2.74 on Wednesday following the disclosure
Bitcoin Depot revealed that cybercriminals infiltrated its information technology infrastructure on March 23, 2026, successfully extracting roughly 50.9 BTC — valued at approximately $3.665 million — from wallets under company control.
According to the company’s statement, the perpetrators secured access credentials connected to its cryptocurrency settlement infrastructure. After gaining entry, they transferred the digital assets before detection systems flagged the suspicious activity.
Bitcoin Depot immediately deployed its cybersecurity incident response framework upon discovering the breach. The company engaged independent security specialists and contacted appropriate law enforcement agencies.
The organization emphasized that the security incident remained isolated within its corporate technology environment. Customer-facing platforms, operational systems, and sensitive personal information remained untouched throughout the breach.
On April 6, the company formally classified the incident as material, pointing to possible reputational damage alongside anticipated legal, regulatory, and remediation expenses. The preliminary loss calculation stands at $3.665 million, determined by the fair market value of the Bitcoin when the unauthorized transfer occurred.
Bitcoin Depot maintains cybersecurity insurance policies that could potentially offset a portion of the losses. Nevertheless, the company warned that full recovery of stolen funds through insurance channels cannot be guaranteed. Management indicated the incident should not materially affect the company’s broader financial health.
Forensic analysis continues with external security consultants to establish the complete extent of the security compromise.
Challenges Mount for the Crypto ATM Operator
This security incident compounds existing challenges facing Bitcoin Depot. In recent weeks, Connecticut’s regulatory authorities revoked the company’s money transmission authorization, accusing it of imposing fees exceeding the state’s statutory 15% limit on 1,015 separate transactions — generating roughly $150,426 in unauthorized charges affecting 510 users.
March also brought leadership changes, with Alex Holmes assuming the roles of chairman and chief executive officer. Holmes brings extensive experience from his tenure leading MoneyGram International between 2016 and 2024, culminating in the company’s $2 billion acquisition by Madison Dearborn Partners.
Regarding financial performance, Bitcoin Depot reported net income of $4.7 million for 2025, representing a decline from the $7.8 million recorded in 2024. Looking ahead, the company projects core revenue will contract between 30% and 40% during 2026, attributing the forecast to evolving state regulations and stricter compliance mandates.
Market Response
Contrary to typical market reactions following theft disclosures, BTM shares advanced 15.6% to close at $2.74 on Wednesday.
Despite this single-day gain, the stock remains down 88% across the past six-month period.
The forensic investigation continues, with Bitcoin Depot stating it is implementing enhanced security measures across its IT infrastructure to prevent similar unauthorized access incidents going forward.
