Galaxy Digital’s testnet experiences a breach, but client assets and data remain secure.

25

Mike Novogratz’s cryptocurrency financial services company reported that unauthorized access was confined to a separate R&D workspace; trading systems and customer accounts remained unaffected.

Galaxy Digital CEO Mike Novogratz. (CoinDesk)

Key points:

  • Unauthorized access was restricted to a distinct R&D workspace, not production systems.
  • Galaxy stated that no client funds or account information were compromised or endangered.
  • All trading platforms and services continue to operate fully and remain unaffected, according to the firm.

Galaxy Digital (GLXY), the cryptocurrency financial services company established by Mike Novogratz, announced it recently managed a cybersecurity event involving unauthorized access to a separate development workspace, as stated by a company representative.

"A negligible amount of company funds utilized for testing within the isolated development workspace was impacted," the representative mentioned in emailed remarks. The loss was under $10,000, based on information from an individual familiar with the situation.

The firm stressed that the compromised environment was exclusively for research and development and was not linked to its primary infrastructure, production systems, trading platforms, or client accounts.

Galaxy indicated that it identified the intrusion and acted swiftly to contain it, secure the affected workspace, and enforce additional safety measures throughout its on-chain infrastructure.

“No client funds or client account details were accessed or at risk at any time according to our current review,” Galaxy stated, adding that all platforms and services remain entirely operational and secure for clients.

Cyberattacks and exploits continue to pose a significant threat in the cryptocurrency sector, where the combination of open-source code, large pools of on-chain liquidity, and inconsistent security practices makes it an appealing target for attackers.

Billions of dollars are lost to exploits of , phishing attacks, and breaches of infrastructure, with industry estimates frequently surpassing $1–2 billion annually in recent years.

Even when incidents are contained and client assets are not affected, breaches can diminish trust, prompt increased regulatory scrutiny, and highlight the operational risks confronting firms operating in predominantly irreversible, always-active financial systems.

Galaxy is a multifaceted financial services and investment firm concentrating on the digital asset and blockchain domain, offering institutional clients trading, asset management, lending, advisory, and custody solutions.

The firm operates in several primary business areas, including global markets, asset management, and digital infrastructure, while also engaging in activities such as , staking, and data center operations.

Positioned as a link between traditional finance and cryptocurrency, Galaxy provides institutional-grade access to digital assets and related technologies, along with investments in blockchain initiatives and emerging fields such as AI-driven infrastructure.

The company mentioned it is continuing to assess the incident and will share updates as necessary.

Read more: Bitcoin’s quantum threat is real, but far from an existential crisis, Galaxy says