BitoPro: what the sources say

Regulation, reserves, fees

Reserves note: No proof-of-reserves publication found; third-party article lists cold storage/multisig/trust arrangements only.

Incidents and regulator actions found

Security incidents

• 2025-05-08 (disclosed 2025-06-02) About US$11.5 million taken from hot wallets during a wallet upgrade; BitoPro attributed it with outside experts to Lazarus Group (social engineering, hijacked AWS session tokens). Outcome: BitoPro said most assets are in cold wallets, trading and withdrawals continued, and affected wallets were refilled from internal reserves; Taiwan FSC said the loss must be absorbed by BitoPro, not customers. source

Regulator and court actions

• 2025-06-03 Taiwan FSC Securities and Futures Bureau: Confirmed the hack and said it would send BitoPro a letter requiring an official public statement; told operators to disclose important information promptly. Outcome: No fine reported in sources read. PRESS OR OTHER SOURCE · official text not found source

What we could not verify

Italy/OAM, EU acceptance, proof of reserves, futures, staking, formal legal entity not verified. Fees and licence from third-party blogs. National EU registers not checked.

Facts are as of 9 Oct 2026. We ran a limited number of searches per exchange, so an empty list is not proof that nothing happened. We did not check the Italian OAM register. Items from press or third parties are reports, not findings by an authority. If something here is wrong or out of date, send a correction with a source: corrections policy. Education only, not investment advice.

Sources

1. [1] ESMA interim MiCA CASP register (CSV) accessed 2026-10-09
2. [2] CTEE: FSC confirms BitoPro hack (2025-06-03) accessed 2026-10-09
3. [3] Grenade: BitoPro introduction (third-party) accessed 2026-10-09
4. [4] Bitdefender: Lazarus accused of BitoPro theft accessed 2026-10-09