Breaking Analysis

Gate's $1.7M Theft Triggers Bank Run: "Who's Lying?"

📅 Jul 2026 ✍️ Industry Observer 🛡️ Security / Investigation
Amount Stolen
1,700,000 USDT

I've been following the Gate platform fund theft case from the very beginning, but I held back from commenting. Sometimes letting the bullets fly a bit brings you closer to the truth.

Over the past few days, many followers have messaged me privately saying Gate Exchange is experiencing a bank run, and user withdrawals have been halted. Currently, only some influential KOLs are unaffected; most unknown accounts are being denied withdrawals under various excuses.

Gate Platform Interface
Image 01: Gate Platform Interface

When the 1.7 million USDT incident first broke, my initial reaction was also insider theft. I even hoped Gate would just collapse — when a major client encounters a problem and the platform's customer service and KOLs respond with sarcasm instead of helping solve it, such an exchange deserves to fail.

The public pressure likely triggered the actual bank run, forcing Gate to issue an apology. Their lengthy statement opened and closed with apologies — a stark contrast from their earlier hardline stance in just two days. This shows how immense the pressure was (their employees' sarcastic comments were unbearable to any reasonable person), and it also suggests they may have indeed discovered a security vulnerability.

Following the Money Trail

I noticed that BIZHUI's investigation traced the stolen funds to a platform called Newpay — a critical piece of information. The following are my objective observations, purely industry-level reflections.

BIZHUI is the most authoritative on-chain tracking team in the crypto space, with long-standing partnerships with law enforcement and regulators across multiple jurisdictions. Their core data sources are widely recognized, and they also provided key data in the BYBIT hack case.

The funds flowed into a platform purpose-built for gray-market "Alipay-style escrow" transactions. This was no insider job — it was a professional heist.

Newpay, based on available information, is a crypto platform specifically providing "Alipay-style escrow transactions" for black and gray market operations — large in scale and reach. The details I'll omit here. But the fact that funds flowed there proves one thing: this was a professional hacking team's operation, essentially ruling out insider theft (as sarcastically suggested by employees). The funds were stolen by a professional team using a mature money-laundering pathway.

Fund Flow Diagram
Image 02: Fund Flow Diagram

Worth Thinking Deeply About

1
From the platform's perspective, they appear to have done every verification step. They seem blameless. But as the custodian of user funds, having user assets stolen by hackers in the crypto industry — if the money can't be recovered and Gate refuses to compensate, this becomes another "exchange Rashomon" incident. Users swallow the loss silently, but trust in crypto and platforms deteriorates further.
2
How can our assets be safe? If this case is just one example — as AI advances enable deepfakes, can KYC still be trusted? Faces can be synthesized, videos forged, transaction histories stitched together from leaked databases. The "liveness detection" used by exchanges, against professional attackers, may be as fragile as paper. This may alert all peer platforms and force them to optimize their authentication schemes. Because crypto storage has only a few options — cold wallets, hot wallets, and exchanges — and the largest holdings still rely on cold wallets for security. Whoever is smarter between platforms and hackers controls the funds.

So the picture is now relatively clear: users' funds deposited on the Gate platform — 1.7 million USD — were taken by hackers. Both the users and Gate are currently victims.

What Should Gate Do Now?

I think it's about posture. The first-step posture was wrong — it seemed the entire organization, top to bottom, assumed the user was "stealing from themselves."

Now that the funds have flowed to a hacker platform, this gives Gate a second chance to take a stance. What follows depends on how Gate performs, and how they win back user trust.

Trust Recovery Strategy
Image 03: Trust Recovery Strategy

As industry insiders, we all know: good exchanges are becoming fewer. Shady exchanges multiply, dragging down industry standards and ethics, and major platforms easily fall into a "race to the bottom."

Personal Security Recommendations
1
Isolate CEX access and Google Authenticator on two separate phones. These phones should have nothing but Twitter, Telegram, WeChat, Alipay, Douyin installed. Avoid taking them out, and never use public WiFi. (I even have one phone with zero domestic apps installed.)
2
Don't randomly register on other platforms, and definitely don't randomly scan your face for verification.
3
Enable every "annoying" security setting on exchanges. If you haven't set a passkey yet — set one today.
4
Turn off Google Authenticator cloud sync.

Exchanges are never to be trusted — only private keys are. But before truly accepting this, most people will pay a steep price.

As for who's actually lying — that's less important now. Because if security audit technology can really be broken, we're all swimming naked in a shark pool. Who can escape? Better to pray this is all fake.