Key Takeaways:

• Bitcoin Depot lost 50.903 BTC, worth $3.665 million, after a March 23 cyberattack on corporate systems.
• Management deemed the event material on April 6 due to potential regulatory and reputational costs.
• Bitcoin Depot is now working with external experts to harden IT security and seek insurance recovery.

Details of the Security Breach

Bitcoin Depot, one of the world’s largest bitcoin ATM operators, revealed Wednesday, April 8, that it was the victim of a targeted cyberattack in late March that resulted in the unauthorized transfer of more than 50 bitcoin from corporate accounts. According to a Form 8-K filed with the Securities and Exchange Commission, the breach was first discovered March 23, 2026.

An unauthorized party infiltrated the company’s internal information technology systems, eventually gaining control of credentials for digital asset settlement accounts. The intruder siphoned 50.903 bitcoin from company-controlled wallets. At the time of the incident, the stolen assets were valued at approximately $3.665 million.

Despite the loss, Bitcoin Depot emphasized that the breach appears to have been localized to its corporate environment. The company stated that customer platforms remained unaffected and maintained that user data and environments were not breached.

“The Company has not identified evidence that customer personally identifiable information was accessed or exfiltrated in connection with the incident; however, the investigation remains ongoing,” the company stated in the filing.

Upon detecting the intrusion, the ATM operator activated emergency response protocols, engaged third-party cybersecurity specialists and notified law enforcement. The company is currently working to harden its infrastructure to prevent future breaches.

While the company initially stated the incident had not “materially impacted” daily operations, management now considers the event material due to the potential for “reputational harm, legal, regulatory, and response costs.” The company added that while it holds insurance policies for cybersecurity incidents, there is no guarantee the coverage will fully reimburse the $3.665 million loss.

The company said it does not believe the theft will have a long-term impact on its overall financial condition or its network of bitcoin ATMs across North America.

WAUSAU, Wis. (WSAW) – A Wisconsin bill creating regulatory requirements for cryptocurrency kiosks is now law, aiming to protect people from scams involving the machines.

The Wood County Sheriff’s Department has been investigating scams involving cryptocurrency kiosks for more than three years and helped craft the new law.

Several people from the Wood County Sheriff’s Department have been testifying in Madison and educating people about these scams.

“And that’s something that is always an important part, but when you can get something out statutorily to protect people, that’s even better,” Becker said.

Daily limits and victim reimbursement

The law puts $1,000 daily transaction limits on the machines and requires machine operators to reimburse victims who report scams to law enforcement within 30 days.

Sheriff Shawn Becker said the department began investigating after receiving a complaint from a citizen who was scammed out of thousands.

“When we got the initial complaint from one of our citizens came in and was scammed $9,000. And then we were, these crypto ATMs were new to there and new to the country,” Becker said.

The department began seizing cash from the machines after people were scammed, holding it as evidence. They would return money to victims, but cryptocurrency companies sued over the practice.

“So we had to change our tactics and we would still serve the warrant, but now we hold that cash here at the sheriff’s department until we get a court order,” Becker said. “I think it really made a difference to get where we’re at now.”

New requirements for operators

The law requires operators to add warning labels to kiosks. Cryptocurrency kiosks also have to be more than five feet away from an ATM.

Kiosk operators must take reasonable steps to detect and prevent fraud. They need to provide notices of virtual kiosks locations to law enforcement before the first transaction on that machine.

“I’m very proud of our department, our investigators that working together with the legal justice system to be part of something that has changed and protected people from being scammed,” Becker said.

Click here to download the WSAW news app or WSAW First Alert weather app.

Click here to submit a news tip or story idea.

Copyright 2026 WSAW. All rights reserved.

What a difference eighteen months makes.

As I write this, a two-week ceasefire between the United States and Iran is hours old. Whether it holds is anyone’s guess. The war that the U.S. and Israel launched on February 28 has already killed American service members, destroyed universities and elementary schools, closed the Strait of Hormuz, and sent shockwaves through every market on the planet. The president who promised to end wars threatened, in his own words, that “a whole civilization will die tonight.” Iran’s ambassador at the United Nations called it incitement to genocide. Experts are debating whether the targeting of bridges, railways, and power grids constitutes war crimes. Children in Tehran are dead.

This is not what we signed up for.

The Bitcoin community did not coalesce around a political candidate so that he could become the latest patron of the military-industrial complex. The very machine, by the way, that Bitcoin was conceptually designed to defund. Satoshi’s whitepaper was published in the wreckage of 2008, a year when the Federal Reserve printed billions to bail out banks while governments spent trillions waging wars most citizens never asked for. Bitcoin was, from its genesis block, a protest against exactly this: the unchecked power of states to debase currency in service of violence.

I want to be clear about something: the crypto community’s natural disgust for war is not a political posture. It is a foundational value. We believe that when governments can’t print money at will, they can’t wage wars at will. That is the entire point. What is happening in Iran is a humanitarian catastrophe. Reports of children killed in residential neighborhoods, a major university bombed, human chains of young people forming around power plants to shield them from American missiles. These are not abstractions. They are the human cost of the very system Bitcoin was built to opt out of.

The two-week ceasefire, brokered through Pakistan’s intervention, is a fragile reprieve. Iran has accepted negotiations in Islamabad beginning Friday. But we have already seen what happens when diplomacy is sabotaged. Iran’s IRGC intelligence chief was assassinated mid-conflict, negotiators have been targeted, and the pattern of setting deadlines only to extend them has made the entire process feel performative. Time will tell if this ceasefire holds.

What won’t change is the math. Wars cost money. Money comes from somewhere. And when governments run out of honest revenue, they print. Every dollar created to fund conflict is a dollar that steals purchasing power from the people who earn it. Every bomb dropped on Iranian bridges is paid for with dollars. Every aircraft carrier repositioned to the Persian Gulf runs on the full faith and credit of the United States Treasury. Every escalation widens the deficit, increases the pressure on the Fed, and further erodes the credibility of the dollar as a neutral global reserve currency.

Bitcoin fixes this. Not through slogans, but through mathematics. A hard cap of 21 million. No Federal Reserve. No emergency printing. No backdoor funding of wars the public never authorized.

To my fellow travelers in the Bitcoin and crypto space: I understand the disillusionment. Many of us believed that political engagement would accelerate adoption and protect our industry. But we should never have expected a politician, any politician, to embody the values of decentralization. That was always our job. Bitcoin doesn’t need a president. It needs users. It needs people who look at what’s unfolding on their screens right now and decide they’d rather hold an asset that no government can inflate to fund the next war.

If the intent of Trump as the de facto “ Bitcoin President” is to embolden our beliefs more in voting with our feet, in selling more USD for BTC, then he’s doing a hell of a job.

_________________________________________________________________________

Bitcoin.com accepts no responsibility or liability, and shall not be liable, whether directly or indirectly, for any loss, damage, claim, cost, or expense of any kind, whether actual, alleged, or consequential, arising out of or in connection with the use of, or reliance upon, any content, goods, or services referenced in this article. Any reliance placed on such information is strictly at the reader’s own risk.