According to @zachxbt, Crypto.com experienced incidents where user balances, names, emails, and phone numbers were leaked, which he argues is more than partial PII (source: ZachXBT on X, Sep 22, 2025). According to @zachxbt, Crypto.com CEO Kris blocked him and he requested a URL showing where these incidents were publicly disclosed (source: ZachXBT on X, Sep 22, 2025). According to @zachxbt, he posted a redacted database snippet labeled as from a CDC database showing fields including app_os android, created_at 2022-01-01, a BTC wallet with current balance 0.19693081, a VVS wallet with current balance 7347.823996202722, and a pin field value 111111 (source: ZachXBT on X, Sep 22, 2025). According to @zachxbt, the allegation directly references account-level balances and identifiers, making it trading-relevant for exchange risk management and for assets tied to Crypto.com infrastructure, including CRO, BTC, and VVS mentioned in the sample (source: ZachXBT on X, Sep 22, 2025).

According to the source, Crypto.com CEO Kris Marszalek said allegations of an undisclosed user data leak are unfounded and that a 2023 security incident was reported to regulators, with no confirmation of a new breach. source: Kris Marszalek statement on X, as referenced in the source. For traders, security-related headlines can increase short-term volatility in exchange-linked tokens like CRO and temporarily widen order-book spreads on the affected venue; monitor CRO spot and perpetual activity and liquidity conditions before sizing risk. source: documented market responses to exchange-specific security headlines in Kaiko Research and order-book behavior during incident news cycles (2023–2024). Until official evidence of an active leak emerges, prioritize data-driven checks: exchange netflows to and from Crypto.com hot wallets, CRO funding rates and basis, and withdrawal processing times, using independent dashboards where possible. source: standard risk monitoring practices noted by analytics providers Glassnode and Nansen.