Galaxy Digital Contains Testnet Hack with No Client Funds or Information Compromised

Galaxy Digital, the digital asset financial services firm founded by Mike Novogratz, contained a cybersecurity incident involving unauthorized access to an isolated development workspace, with losses limited to an immaterial amount of company funds used for testing, estimated at less than $10,000.

The firm emphasized that the affected environment was used solely for research and development and was not connected to its core infrastructure, production systems, trading platforms, or client accounts, with all services remaining fully operational.

Unauthorized Access Limited to Segregated R&D Workspace

Galaxy Digital detected unauthorized access to an isolated development workspace used exclusively for research and testing purposes. The firm moved quickly to contain the intrusion, secure the compromised workspace, and implement additional precautionary measures across its on-chain infrastructure.

A company spokesperson stated that an immaterial amount of company funds used for testing within the isolated development workspace was impacted, with losses estimated at under $10,000. The firm emphasized that the affected environment was not connected to its core infrastructure, production systems, trading platforms, or client accounts.

Galaxy stated that based on its review to date, no client funds or client account information were accessed or at risk at any point. All trading platforms and services remain fully functional and unaffected.

Firm Maintains Institutional-Grade Security Protocols

Galaxy Digital operates as a diversified financial services and investment firm focused on the digital asset and blockchain sector, providing institutional clients with trading, asset management, lending, advisory, and custody services. The firm operates across global markets, asset management, and digital infrastructure, while also running businesses in crypto mining, staking, and data center operations.

The incident highlights the ongoing cybersecurity risks in the crypto industry, where open-source code, large pools of onchain liquidity, and uneven security practices create attractive targets for attackers. Industry estimates often exceed $1–2 billion in annual losses from smart contract exploits, phishing schemes, and infrastructure breaches.

Galaxy’s rapid response and transparent communication reflect evolving standards for institutional-grade security practices. The firm’s ability to contain the incident without impact on client assets or production systems underscores the importance of robust internal security measures.

Incident Underscores Persistent Industry Security Risks

Even when incidents are contained and client assets are not impacted, breaches can erode trust, trigger heightened regulatory scrutiny, and highlight operational risks facing firms operating in largely irreversible, always-on financial systems. Galaxy’s proactive actions may set a precedent for best practices in incident management and transparency.

The breach did not affect Galaxy Digital’s core business lines or its global markets and asset management operations. The firm continues to position itself as a bridge between traditional finance and crypto, offering institutional-grade access to digital assets and related technologies, alongside investments in blockchain ventures and emerging areas such as AI-powered infrastructure.

Galaxy stated that it is continuing to review the incident and will provide updates as appropriate. The company’s commitment to maintaining secure operations for its institutional clients remains unchanged.

FAQ

What was affected in the Galaxy Digital security incident?

Unauthorized access was limited to an isolated development workspace used for research and testing. The affected environment was not connected to Galaxy’s core infrastructure, production systems, trading platforms, or client accounts. Client funds and account information were not accessed or at risk.

How much was lost in the incident?

An immaterial amount of company funds used for testing within the isolated development workspace was impacted, with losses estimated at less than $10,000. Galaxy Digital stated that no client funds were involved.

Are Galaxy Digital’s services still operational?

Yes, all trading platforms and services remain fully functional and unaffected. The firm implemented additional precautionary measures across its on-chain infrastructure and continues to provide institutional-grade services to clients.