The Japanese crypto world woke up to a nightmare in 2024 when DMM Bitcoin — one of the country's largest regulated exchanges — announced it was shutting down for good. The reason? A jaw-dropping $305 million Bitcoin heist that investigators have tied to North Korean-linked hackers. It wasn't just a hack. It was the slow-motion collapse of a household-name exchange, leaving hundreds of thousands of customers wondering where their money went and what comes next.

What Exactly Happened to DMM Bitcoin?

In late May 2024, DMM Bitcoin detected unauthorized outflows from one of its wallets. Within hours, the damage was clear: roughly 4,500 BTC had been siphoned off in what became one of the largest single-exchange thefts in crypto history. The exchange promptly suspended withdrawals, spot trading, and even leveraged positions to contain the bleeding.

Investigators from Japan's Financial Services Agency (FSA) and blockchain-tracing firms soon pointed the finger at TraderTraitor, a hacking group widely believed to operate under North Korea's Reconnaissance General Bureau. The same group has been linked to previous attacks on the Ronin Bridge, Harmony, and several other platforms.

According to public reporting, the attack vector started with a spear-phishing campaign targeting an employee of Ginco, a wallet-as-a-service provider that DMM Bitcoin relied on. Once inside, the attackers spoofed transaction requests that looked legitimate, draining funds without triggering immediate alarms.

Why Is DMM Bitcoin Shutting Down?

On June 3, 2024, DMM Bitcoin confirmed what the market feared: the exchange would wind down operations entirely. New account openings were frozen, leveraged trading was phased out, and customer assets were earmarked for transfer to SBI VC Trade, a subsidiary of financial giant SBI Group.

The company cited "systemic risks" and the operational burden of running a secure platform after such a catastrophic incident. Industry analysts, however, saw a simpler explanation: customer trust evaporated overnight. Once withdrawals stalled and headlines screamed about missing billions, there was no realistic path back for the brand.

The transfer deal with SBI VC Trade was structured to ensure customer account balances — both crypto and yen holdings — would be migrated without losses for end users. DMM Bitcoin pledged to cover any shortfalls out of its own corporate funds, but the reputational damage was already done.

Timeline of the Disaster

  • May 31, 2024: DMM Bitcoin reports unauthorized outflows totaling roughly 4,500 BTC (~$305M).
  • June 1, 2024: All spot, leveraged, and yen withdrawals suspended.
  • June 3, 2024: Exchange announces full shutdown and intent to transfer accounts to SBI VC Trade.
  • July 2024 onward: Investigators publicly link the hack to North Korea's TraderTraitor group.
  • 2025: Phased migration of customer accounts to SBI VC Trade continues.

What It Means for Japanese Crypto Users

The DMM Bitcoin collapse is a stress test for Japan's heavily regulated crypto market. The country requires exchanges to register with the FSA, hold the bulk of customer assets in cold wallets, and maintain strict segregation between company and user funds. DMM Bitcoin followed the rules — and still lost hundreds of millions.

The Trust Deficit

For everyday users, the lesson is uncomfortable: not your keys, not your coins isn't just a slogan — it's a survival strategy. Several Japanese retail investors took to social media to share stories of holding modest BTC bags on DMM for years, only to face weeks of withdrawal limbo during the migration to SBI VC Trade.

A Boon for Hardware Wallets

Wallet vendors and self-custody advocates have predictably pounced on the moment. Sales of hardware wallets in Japan reportedly spiked in the weeks following the hack, as users reassessed the trade-offs between convenience and sovereignty.

Could It Have Been Prevented?

Security experts argue the red flags were visible long before the heist. The reliance on a third-party wallet service, the speed of the outflows, and the apparent lack of multi-party computation (MPC) or real-time anomaly detection all left DMM Bitcoin exposed. North Korean groups have repeatedly demonstrated an ability to patiently infiltrate supply chains — a tactic far harder to defend against than a brute-force server breach.

"Even well-capitalized, well-regulated exchanges are not immune. The DMM Bitcoin incident proves that operational security is just as important as regulatory compliance."

Key Takeaways

  • DMM Bitcoin lost roughly $305 million in a single hack on May 31, 2024 — one of the largest exchange thefts in crypto history.
  • The exchange is fully shutting down, with customer accounts migrating to SBI VC Trade.
  • Investigators have tied the attack to North Korea-linked TraderTraitor via a spear-phishing operation against a wallet provider.
  • The incident has spurred a Japanese retail rush to self-custody and hardware wallets.
  • Even regulated exchanges with strict compliance are vulnerable when third-party supply chains are compromised.