Details of the Incident
Published 6/30/2026, 6:04:24 AM
Reports from June 2026 indicate that KuCoin sent a legal threat email to a victim who had lost approximately $250,000 to the Atomic macOS Stealer (AMOS) malware [Source: http://www.odaily.news/en/newsflash/495987]. The incident was brought to light by on-chain investigator ZachXBT, who characterized the exchange's response as a legal escalation against a user seeking assistance after a significant theft.
Details of the Incident
The victim was targeted by the Atomic macOS Stealer (AMOS), a "Malware-as-a-Service" (MaaS) specifically designed to exfiltrate sensitive data from Apple users, including keychain passwords and cryptocurrency wallet information [Source: https://www.darktrace.com/blog/atomic-stealer-darktraces-investigation-of-a-growing-macos-threat].
While the full text of KuCoin's communication has not been publicly released, the following details have been established:
| Metric / Detail | Information |
|---|---|
| Loss Amount | Approximately $250,000 |
| Malware Type | Atomic macOS Stealer (AMOS) |
| Primary Source | ZachXBT (On-chain Investigator) |
| Nature of Threat | Legal threat email sent by KuCoin to the victim |
| Date Reported | June 2026 |
Context of Atomic Stealer (AMOS)
The malware involved in this theft has seen a massive surge in activity throughout 2025 and 2026. It typically spreads through "ClickFix" lures and malvertising—fake Google Ads for macOS help sites—targeting over 300 entities in a single three-month window in late 2025 [Source: https://www.securityweek.com/hundreds-targeted-in-new-atomic-macos-stealer-campaign/]. AMOS is capable of compromising popular wallets including Ledger Live, Electrum, and Exodus.
KuCoin's Regulatory and Legal Background
The reported threat to the victim occurs alongside a history of regulatory friction for the exchange. In December 2023, KuCoin settled with the New York Attorney General for $22 million and was banned from operating in New York for failing to register as a securities and commodities broker-dealer [Source: https://ag.ny.gov/press-release/2023/attorney-general-james-secures-more-22-million-cryptocurrency-platform-operating].
Note on Related Entities: This incident is distinct from the 2023 Atomic Wallet hack (which resulted in over $100M in losses). A class-action lawsuit related to that separate hack was dismissed in September 2024 [Source: https://es.tradingview.com/news/cointelegraph:0e9470a4f094b:0-atomic-wallet-wins-dismissal-of-class-suit-over-100m-hack/].
The specific legal grounds KuCoin cited for threatening the victim remain undisclosed, and it is unclear if the exchange has provided any subsequent assistance in asset recovery.