Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Global Financial Service Disruptions
When banks, exchanges, brokers and payment providers unexpectedly stop customers moving money. A restriction is recorded as a fact; its cause is a separate, sourced judgement, and an unexplained restriction is never presented as an attack.
On a fixed panel of 54 provider status feeds, restrictions rose from 48 to 58 between the two most recent 14-day windows, within normal variation. What changed is the cause mix: nine restrictions with confirmed cyber causes began in the last 14 days against one in the 14 days before, led by the Binance withdrawal freeze, Credit Mutuel Arkea and a Japanese hosting breach that reached FX brokers. Historical coverage is too uneven to call a multi-year acceleration.
Where restrictions were recorded
Countries shaded by number of verified records; select one to filter. Red dot: confirmed cyber cause. Open amber ring: unexplained. Grey: other causes. Counts reflect where DFX searched as much as where events happened.
Live: provider-posted restrictions
Raised automatically when a financial provider's own status page says customers cannot withdraw, deposit, transfer, settle or trade. Unclassified until an analyst reviews them; hand-checked precision of the rule on 30 posts was 87%.
- FlutterwaveNov 6 06:56 UTC · payment processorCause not yet classifiedcard authresolved
[NGN] Service Alert: Intermittent Card Transaction Failures
- XenditNov 6 06:40 UTC · payment processorCause not yet classifiedpayoutsresolved
Payouts Disruption in Indonesia
- FlutterwaveNov 5 22:19 UTC · payment processorCause not yet classifiedpayoutsactive
[NGN] Service Alert: Pending Payouts on Flutterwave for Business (F4B)
- XenditNov 5 21:50 UTC · payment processorCause not yet classifieddeposits0 h
EWALLET TRUEMONEY Thailand Disruption
- XenditNov 5 21:30 UTC · payment processorCause not yet classifiedpayoutsresolved
Payouts Disruption in Indonesia
- FlutterwaveNov 5 18:15 UTC · payment processorCause not yet classifiedcard authresolved
Service Alert: BIN Service Disruption – Impact on Card Transactions
- XenditNov 5 17:10 UTC · payment processorCause not yet classifiedpayoutsresolved
Payouts Disruption in Philippines
- XenditNov 5 15:30 UTC · payment processorCause not yet classifiedtransferspayoutsresolved
Payouts Disruption in Indonesia
- CurrencycloudNov 5 14:39 UTC · payment processorCause not yet classifiedpayoutsresolved
Potential delays to funding
- FlutterwaveNov 5 14:09 UTC · payment processorCause not yet classifiedtransfersresolved
[NGN] Service Alert: Intermittent Name Enquiry Failures
- ToastNov 5 10:47 UTC · payment processorCause not yet classifieddepositsresolved
Deposit Delay
- KrakenNov 5 10:19 UTC · crypto exchangeCause not yet classifiedwithdrawalsdepositspayoutsactive
Deposit and Withdrawal Delays on Multiple Networks
- XenditNov 5 07:50 UTC · payment processorCause not yet classifiedpayouts0.2 h
Payouts Disruption in Philippines
- XenditNov 5 05:37 UTC · payment processorCause not yet classifieddeposits0.3 h
QR_CODE XENDIT Indonesia Disruption
- XenditNov 5 05:37 UTC · payment processorCause not yet classifieddeposits0.3 h
EWALLET DANA Indonesia Disruption
Active restriction tracker
Verified restrictions not yet reported as fully restored.
- Bullish ExchangeNov 4 15:39 UTC · GI · crypto exchangeTechnical failuredepositswithdrawalsrecovering
Bullish reported a transaction screening issue delaying deposits and withdrawals from 4 Nov 2026; most assets recovered by 5 Nov but several networks remained delayed.
- Mercado BitcoinNov 2 06:24 UTC · BR · crypto exchangeConfirmed cyberwithdrawalsdepositstradingallactive
Brazil's largest crypto exchange Mercado Bitcoin was drained of about USD 36M to 49M from hot wallets across at least 10 chains on 2 Nov 2026 and took the whole platform offline, suspending deposits and withdrawals. It pledged to cover all...
- Credit Mutuel ArkeaNov 1 12:25 UTC · FR · commercial bankConfirmed cybertransfers outrecovering
Credit Mutuel Arkea announced on 4 Nov 2026 that it had been the victim of an attack that allowed fraudulent operations; attackers came in through a service provider's platform and used the bank's own account to send transfers to other...
- GMO Payment Gateway (Issuing Support Service for Life Card Vpreca)Oct 30 · JP · payment processorConfirmed cybercard authactive
GMO Payment Gateway disclosed on 2 Nov 2026 that a function it runs for Life Card's Vpreca prepaid card was used without authorization on 30 Oct, affecting 69 accounts' data, and that it suspended part of the affected services pending...
- Binance2026-10-29T20:05Z (approx; see conflicts) · XX · crypto exchangeConfirmed cyberwithdrawalsrecovering
Binance paused all crypto withdrawals on 29 Oct 2026 after attackers drained hot wallets of about USD 6.3B, the largest crypto theft on record. Withdrawals resumed in phases from 1 Nov starting with Bitcoin, with USD 3.6B net outflow in...
- MW PayOct 29 · BR · payment processorRegulatory or legalinstant paymentsallactive
On 29 Oct 2026 the Banco Central do Brasil placed Joinville payment institution MW Pay, which connected fintechs and marketplaces to Pix, into extrajudicial liquidation for serious breaches of payment system rules. Under BCB rules its Pix...
- OANDA Japan (OANDA Securities)Oct 22 · JP · brokerageConfirmed cyberwithdrawalstradingrecovering
OANDA Japan held all client withdrawals requested on 22 Oct 2026 for security checks after the GMO Internet VPS breach exposed clients' MetaTrader logins, releasing them on 23 Oct. On 26 Oct it confirmed unauthorized trades and restricted...
- CredipaivaOct 16 · BR · credit unionRegulatory or legalwithdrawalsallactive
On 16 Oct 2026 the Banco Central do Brasil ordered the extrajudicial liquidation of Credipaiva, a small mutual credit cooperative for employees of Centro Universitario Newton Paiva, citing serious rule violations. Narrow member base, so...
- BankMobile (BM Technologies)Sep 1 00:00 UTC · US · fintechConfirmed cyberpayoutsachonline bankingactive
After attackers took over BankMobile student refund accounts, the California Community Colleges Chancellor's Office directed districts to pause electronic aid disbursements through BM Technologies from early October 2026 and pay by paper...
- Resolv (USR)Mar 22 · stablecoin issuerConfirmed cyberwithdrawalsrecovering
An attacker used a compromised minting key to create about 80M USD of unbacked Resolv USR around 22 Mar 2026; Resolv paused the protocol and limited redemptions to verified pre-incident holders as USR lost its peg.
- BlockFillsFeb 6 · US · fintechLiquidity or solvencywithdrawalsdepositsactive
CME-backed institutional crypto liquidity provider and lender BlockFills suspended all client deposits and withdrawals in early Feb 2026, citing extreme volatility. Withdrawals stayed frozen and a later source reports a Chapter 11 filing...
- Mixed or cascadingwithdrawalstransfers outcard authallrecovering
In May 2024 the bankrupt BaaS middleware firm Synapse cut off a transaction system amid a ledger dispute with Evolve Bank, freezing more than 100,000 customers of fintechs such as Yotta and Juno. A shortfall of up to USD 96m was later...
- National Bank of Ukraine (banking system wide)Feb 24 · UA · central bankRegulatory or legalwithdrawalscross borderatmrecovering
On 24 February 2022 the National Bank of Ukraine imposed wartime restrictions capping daily cash withdrawals at UAH 100,000 and suspending the FX market. Foreign currency cash limits were partly eased in March 2022; the UAH 100,000 daily...
Verified significant restrictions by month
Tier 1 research records (broad, unexpected, an hour or more or reported by a regulator or credible outlet). Red is the confirmed-cyber share. Search depth was much greater for October 2026 than for earlier months, so this chart cannot show acceleration on its own.
Early-warning watchlist: unexplained restrictions
Verified restrictions from the last 45 days with no established cause. Listed because the cause is unknown, not because an attack is suspected.
- Bancontact (as seen by Mollie)Nov 5 09:59 UTC · BE · payment networkUnexplainedcard auth0.87 h
Mollie reported a partial external Bancontact disruption on 5 Nov 2026 for 52 minutes in which some consumers could not pay.
- KnabNov 5 08:12 UTC · NL · digital bankUnexplainedinstant payments0.55 h
Mollie reported a full iDEAL | Wero disruption at Knab on 5 Nov 2026 lasting 33 minutes.
- CoinbaseNov 5 03:05 UTC · US · crypto exchangeUnexplainedwithdrawalsdepositsunknown
Coinbase status page: "Disabled Sends / Receives - EVMSEI", from 05 Nov 03:05 UTC, unresolved at retrieval.
- Swedbank (Swish)Nov 4 23:32 UTC · SE · commercial bankUnexplainedinstant payments1.32 h
Swish status page logged an unplanned disturbance (Disturbance impacting Swish transactions to and from Swedbank) from 2026-11-04T23:32Z to 2026-11-05T00:51Z. No cause published.
- GeminiNov 4 22:50 UTC · US · crypto exchangeUnexplainedtradingonline banking0.15 h
Gemini reported that users might not be able to log in or trade from 17:50 to 17:59 EST on 4 Nov 2026.
- PaxosNov 4 15:04 UTC · US · crypto custodianUnexplainedwithdrawalsdeposits7 h
Paxos reported an outage on its Transfers endpoints on 4 Nov 2026, leaving crypto withdrawals pending from 15:04 to 18:15 UTC and some deposits delayed until 22:01 UTC. No cause was disclosed.
- Nigeria Central Switch (most likely NIBSS NIP)Nov 4 10:57 UTC · NG · clearing settlementUnexplainedinstant paymentstransfers in3.97 h
Third Central Switch failure in the window: Paystack reported inward Nigerian bank transfers failing on 4 Nov 2026 from 10:57 to 14:55 UTC.
- Mastercard pre-authorisation processing (South Africa, via Paystack)Nov 4 08:57 UTC · ZA · card networkUnexplainedcard auth1.65 h
Paystack reported Mastercard pre-authorisation failures for South African merchants on 4 Nov 2026 for about 1.7 hours.
- Bitso (MXN withdrawals and trading)Nov 4 00:00 UTC · MX · crypto exchangeUnexplainedwithdrawalstrading0.8 h
From 18:00 to 18:48 Mexico City time on 3 Nov 2026 some Bitso users saw slow trading and delayed SPEI MXN withdrawals, which were retried and processed. Earlier that day (15:24Z to 18:42Z) Bitso also logged web and app login issues it...
- Banco do BrasilNov 3 11:01 UTC · BR · commercial bankUnexplainedmobile apponline bankinginstant paymentsresolved
On 3 Nov 2026, the first business day of November in Brazil, Banco do Brasil's app and website failed from about 08:01 local, peaking above 6,200 Downdetector reports. Users could not log in, see balances or send Pix; the bank later said...
- Flutterwave KES payout provider (unnamed)Nov 3 · KE · payment processorUnexplainedpayoutsresolved
Flutterwave reported two separate KES payout interruptions on 3 Nov 2026 (resolved by 06:55 and 11:54 UTC) in which payouts were delayed or did not reach recipients.
- Swish (scheme-wide)Nov 2 23:08 UTC · SE · payment networkUnexplainedinstant payments0.83 h
Swish status page logged an unplanned disturbance (Disturbance at Swish, separate from planned maintenance 02:00 to 05:00 CET) from 2026-11-02T23:08Z to 2026-11-02T23:58Z. No cause published.
Shared infrastructure
Providers named in two or more verified records. A shared provider is a documented dependency, not evidence of a shared compromise.
- GMO Internet (Onamae.com Desktop Cloud): FXTF, OANDA Japan (OANDA Securities), Gaitame Finest, Five unnamed Japanese FX firms (retail FX brokers)
- Amazon Web Services us-east-1: Coinbase, Robinhood
- Amazon Web Services: Binance, KuCoin
Case library
Tier 1 restrictions of severity 4 or 5, newest first.
- Mercado BitcoinNov 2 06:24 UTC · BR · crypto exchangeConfirmed cyberwithdrawalsdepositstradingallactive
Brazil's largest crypto exchange Mercado Bitcoin was drained of about USD 36M to 49M from hot wallets across at least 10 chains on 2 Nov 2026 and took the whole platform offline, suspending deposits and withdrawals. It pledged to cover all...
- Credit Mutuel ArkeaNov 1 12:25 UTC · FR · commercial bankConfirmed cybertransfers outrecovering
Credit Mutuel Arkea announced on 4 Nov 2026 that it had been the victim of an attack that allowed fraudulent operations; attackers came in through a service provider's platform and used the bank's own account to send transfers to other...
- Binance2026-10-29T20:05Z (approx; see conflicts) · XX · crypto exchangeConfirmed cyberwithdrawalsrecovering
Binance paused all crypto withdrawals on 29 Oct 2026 after attackers drained hot wallets of about USD 6.3B, the largest crypto theft on record. Withdrawals resumed in phases from 1 Nov starting with Bitcoin, with USD 3.6B net outflow in...
- RevolutOct 20 06:08 UTC · GB · digital bankTechnical failuremobile appcard authtransfers outatm11.7 h
On 20 Oct 2026 a power event in Google Cloud's europe-west2 London region knocked out most Revolut services across Europe for much of the day, including card payments, transfers, ATM withdrawals, FX and trading. Revolut confirmed the...
- SPEI (Banco de Mexico) and participating banksOct 17 18:49 UTC · MX · payment networkTechnical failuretransfers outtransfers ininstant paymentswithdrawals5.7 h
On Saturday 17 Oct 2026 SPEI interbank transfers in Mexico were delayed or failed across at least nine banks and fintechs, with reports intensifying from 16:00 local and easing after 18:00. Banks blamed SPEI maintenance; Bitso logged...
- About 30 Austrian banks on Accenture TiGital (Volksbank sector, Hypo group, bank99, part of Grawe group, Austrian Anadi Bank)Oct 6 10:00 UTC · AT · core banking vendorTechnical failureonline bankingmobile appcard authtransfers out8 h
On 6 Oct 2026 a data-centre failure at shared IT provider Accenture TiGital (ex-ARZ) took down online banking, apps, card payments and payment traffic for about 30 Austrian banks including the Volksbank and Hypo sectors and bank99. The...
- BitgetSep 24 · SC · crypto exchangeConfirmed cyberwithdrawalspayoutsunknown
Bitget suspended all withdrawals after a USD 387.5M hot wallet theft on 24 Sep 2026. The halt began before the window but persisted into it: other tokens, fiat and P2P withdrawals were scheduled to return on 2 Oct. Bitget blamed a...
- London Metal Exchange (LMEselect)Mar 16 14:43 UTC · GB · securities exchangeTechnical failuretradingresolved
LME's primary electronic matching engine failed at about 14:43 London time on 16 Mar 2026, halting electronic trading in all metals during the closing-price window. Trading was restored on a secondary instance after two to three hours.
- CME Group (Globex, EBS, BrokerTec)Nov 28 02:40 UTC · US · securities exchangeTechnical failuretradingresolved
A chiller plant failure at CyrusOne's CHI1 data center halted CME Globex futures and options and EBS FX trading from about 20:40 CT on 27 Nov 2025 until the next US morning. It was one of the largest derivatives market outages on record.
- UpbitNov 26 19:42 UTC · KR · crypto exchangeConfirmed cyberwithdrawalsdepositsunknown
South Korea's largest exchange Upbit detected an unauthorized transfer of about 44.5B KRW in Solana-network assets at 04:42 KST on 27 Nov 2025 and suspended all crypto deposits and withdrawals. It reported to KISA and the FSS and promised...
- Multi Commodity Exchange of India (MCX)Oct 28 03:30 UTC · IN · securities exchangeTechnical failuretrading4.4 h
India's MCX halted trading for over four hours on 28 Oct 2025, restarting at 13:25 IST from its disaster recovery site. It was the longest outage in the exchange's history and SEBI sought a detailed report.
- BinanceOct 10 21:18 UTC · crypto exchangeMixed or cascadingtradingtransfers outresolved
During the 10 Oct 2025 crypto crash, Binance acknowledged brief module glitches after 21:18 UTC and depegs of USDe, wBETH and BNSOL on its platform. It paid over 328M USD in compensation while blaming the macro shock.
- NobitexJun 18 · IR · crypto exchangeConfirmed cyberallunknown
Iran's largest crypto exchange Nobitex was hit on 18 Jun 2025 by Predatory Sparrow, which burned about 90M USD and later leaked source code. The exchange took its website and app offline, stopping all customer activity.
- Korea Exchange (KOSPI market)Mar 18 02:37 UTC · KR · securities exchangeTechnical failuretrading0.12 h
On 18 Mar 2025 a KRX matching-system fault stopped execution of all KOSPI trades from 11:37 to 11:44 KST, reportedly the first market-wide KOSPI halt since KRX was formed in 2005. KRX blamed a logic conflict between self-match-prevention...