Bitcoin Depot Reports $3.7M Hack as Regulatory Pressure Mounts

Bitcoin Depot, the world's largest Bitcoin ATM operator, has confirmed that a hacker breached its IT systems and drained 50.9 BTC — approximately $3.66 million — from the company's corporate cryptocurrency wallets. The incident was disclosed in a filing submitted to the U.S. Securities and Exchange Commission (SEC) on April 8.

How the Breach Unfolded

On March 23, an unauthorized actor gained access to Bitcoin Depot's IT infrastructure and seized control of the company's cryptocurrency accounts, ultimately transferring out 50.9 BTC. Upon detecting the breach, Bitcoin Depot activated its incident response protocols, engaged external cybersecurity experts, and notified law enforcement.

The company stated that no customer data or personal information was compromised in the attack. An investigation involving third-party specialists remains ongoing. Bitcoin Depot noted that insurance may cover a portion of the losses but cautioned that "there is no guarantee that this will be sufficient to cover all losses."

Why This Matters

The hack targeting Bitcoin Depot underscores the vulnerability of even publicly traded, regulated players in the crypto infrastructure space. As the largest operator of Bitcoin ATMs, the company's security incident raises broader concerns about the resilience of crypto-physical service providers. The breach arrives at a particularly challenging moment for the industry — 666 Bitcoin ATMs have been shut down across the U.S. since the start of 2026, reflecting a sector in flux.

Mounting Regulatory Challenges

The cyberattack occurred against a backdrop of intensifying regulatory scrutiny. In March, Connecticut authorities suspended Bitcoin Depot's money transmission license after discovering the operator had exceeded the state's 15% fee cap on 1,015 transactions. As a result, 510 customers were overcharged by a total of approximately $150,426.

The broader wave of Bitcoin ATM shutdowns across the United States began in March 2025, following a bill introduced by Illinois Senator Dick Durbin aimed at combating fraud associated with cryptocurrency kiosks. The closures have accelerated since then.

Financial Performance Under Pressure

Bitcoin Depot's financial results paint a challenging picture. The company reported net income of $4.7 million for 2025, down from $7.8 million in the prior reporting period. Management expects core business revenue to decline by 30–40% in the current year due to state-level regulatory requirements and tightened compliance standards.

The company acknowledged that while its anti-fraud measures have been effective in reducing consumer scams and protecting clients, these same efforts are expected to result in significantly lower revenue compared to previous years.

Despite the negative news, Bitcoin Depot's stock rose 15.6% on April 8 to close at $2.74. However, the shares have plummeted 88% over the past six months.

The incident follows a broader trend of turmoil among Bitcoin ATM operators. In November 2025, rival operator Crypto Dispensers announced the sale of its business for $100 million amid criminal prosecution of its CEO.