What happened
Company says the service was not hacked
On August 1, 2023, Incogniton reported in its official Telegram channels that some users had funds stolen from their crypto wallets after their Incogniton login credentials were stolen. The company attributed the incident to malware stealing logins and passwords and denied any leak on its side: according to Incogniton, an attacker would also need the user’s MetaMask password, which Incogniton does not have. On August 13, the company said that hacker attacks had become more frequent and again urged users to enable 2FA. We found no independent confirmation: third-party reviews, including those from competitors, only retell this case.
Who was affected
some users
Some users, according to the company. The number was not disclosed.
Losses
amount not disclosed
Not disclosed. The company did not report any compensation.
What the company did
It recommended using a strong password, enabling two-factor authentication (introduced in January 2022), and scanning computers for malware. It also offered support with restoring access to accounts. On August 13, it published instructions for enabling 2FA through Google Authenticator. Later, without a direct connection to the incident, it added a CAPTCHA at login (February 2024), updated 2FA in the app itself (May 2026), and added a session list with an option to log out of all devices (September 2026).
Our editors collected and checked the sources; the text says who gives each figure.