What is the official website of Bitcoin Depot ?

The official website of Bitcoin Depot is https://bitcoindepot.com.

What is Bitcoin Depot's cybersecurity risk score?

Bitcoin Depot has an AI-generated cybersecurity risk score of 350 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has Bitcoin Depot experienced?

According to Rankiteo, Bitcoin Depot currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Bitcoin Depot been affected by any supply chain cyber incidents ?

According to Rankiteo, Bitcoin Depot has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Bitcoin Depot have SOC 2 Type 1 certification ?

According to Rankiteo, Bitcoin Depot is not certified under SOC 2 Type 1.

Does Bitcoin Depot have SOC 2 Type 2 certification ?

According to Rankiteo, Bitcoin Depot does not hold a SOC 2 Type 2 certification.

Does Bitcoin Depot comply with GDPR ?

According to Rankiteo, Bitcoin Depot is not listed as GDPR compliant.

Does Bitcoin Depot have PCI DSS certification ?

According to Rankiteo, Bitcoin Depot does not currently maintain PCI DSS compliance.

Does Bitcoin Depot comply with HIPAA ?

According to Rankiteo, Bitcoin Depot is not compliant with HIPAA regulations.

Does Bitcoin Depot have ISO 27001 certification ?

According to Rankiteo,Bitcoin Depot is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Bitcoin Depot operate in ?

Bitcoin Depot operates primarily in the Financial Services industry.

How many employees does Bitcoin Depot have ?

Bitcoin Depot employs approximately 274 people worldwide.

Does Bitcoin Depot own any subsidiaries ?

Bitcoin Depot presently has no subsidiaries across any sectors.

How many LinkedIn followers does Bitcoin Depot have ?

Bitcoin Depot's official LinkedIn profile has approximately 16,824 followers.

What is the NAICS classification code for Bitcoin Depot ?

Bitcoin Depot is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Bitcoin Depot have a Crunchbase profile ?

Yes, Bitcoin Depot has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/bitcoin-depot.

Does Bitcoin Depot have a LinkedIn profile ?

Yes, Bitcoin Depot maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bitcoin-depot.

How many cybersecurity incidents has Bitcoin Depot experienced ?

As of August 22, 2026, Rankiteo reports that Bitcoin Depot has experienced 5 cybersecurity incidents.

How many peer or competitor companies does Bitcoin Depot have ?

Bitcoin Depot has an estimated 32,564 peer or competitor companies worldwide.

What types of cybersecurity incidents has Bitcoin Depot faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Bitcoin Depot

Boost Score +25 with badge (5 left)

350

/1000

Critical

375

/1000

Critical

Bitcoin Depot Vendor Cyber Rating & Cyber Score

bitcoindepot.com

cb in

Add Your Compliance Badge

Bitcoin Depot is the largest Bitcoin ATM Network worldwide offering users the ability to buy Bitcoin with cash instantly at over 9,000 BTM locations and over 16,000 BDCheckout locations across the United States, Canada, Australia, and Hong Kong. NASDAQ Ticker: $BTM Our mission is to provide the most secure, convenient, and fastest cryptocurrency transaction. Our vision is to bring cryptocurrency market to the masses. To learn more about cryptocurrency, how to use a Bitcoin ATM, and to find your nearest Bitcoin Depot ATM location, visit our website: https://bitcoindepot.com/

Bitcoin Depot A.I CyberSecurity Scoring

Scoring History

Bitcoin Depot

Bitcoin Depot CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Bitcoin Depot

Breach

3/2026

BIT1775688045

Bitcoin Depot

Cyber Attack

100

3/2026

BIT1776076773

Bitcoin Depot

Breach

100

3/2025

BIT1775717188

Bitcoin Depot

Breach

7/2024

BIT537071025

Bitcoin Depot

Breach

1/2024

BIT1772504668

Loading…

A.I.

Bitcoin Depot Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Bitcoin Depot

Incidents vs Financial Services Industry Avg (This Year)

Bitcoin Depot has 9.29% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Bitcoin Depot has 94.17% more incidents than the average of all companies with at least one recorded incident.

Incident Types Bitcoin Depot vs Financial Services Industry Avg (This Year)

Bitcoin Depot reported 2 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - Bitcoin Depot (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Bitcoin Depot Subsidiaries

Parent Company

Bitcoin Depot

Financial Services

Website: https://bitcoindepot.com

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

Bitcoin Depot Similar Companies

Swedbank

swedbank.se

Since 1820, Swedbank has been the bank for the many households and businesses. We are a modern financial services platform focused on customer satisfaction. Our goal is to encourage people to save for a better future, and we aim to help people, businesses and society to grow by promoting a healthy and sustainable economy. As an equal opportunity employer, we believe that diversity and equality help us to grow and achieve our goals. We encourage a culture built on trust, respect and our values - open, simple and caring. With 7.4 million private customers and more than 600,000 corporate and organisational customers, we have a leading position in our home markets of Sweden, Estonia, Latvia and Lithuania. This position also enables us to offer our employees great opportunities to grow and develop. Working here is about creating value for our customers, our colleagues and society. Inspiring and learning from one another is what moves us forward, and by working together, we make a difference. Find our policy for social media here: www.swedbank.se/om-oss/policy-fb

Nomura

nomura.com

Nomura is a financial services group with an integrated global network. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its four business divisions: Wealth Management, Investment Management, Wholesale (Global Markets and Investment Banking), and Banking. Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership.

Northwestern Mutual

northwesternmutual.com

At Northwestern Mutual, our financial advisors are ready to meet you where you are and stay with you long-term. Get financial clarity with a people-first plan designed to uncover new opportunities and potential blind spots. The right time to plan is right now. With $265.0 billion in assets under management, $28.1 billion in revenues, and over $1.8 trillion in life insurance protection in force, we've served more than 4.5 million people through our life, disability income, and long-term care insurance, annuities, brokerage, advisory services, trust services, and discretionary portfolio management solutions. Our wealth management company and investment services manage over $125 billion in client assets. We're proud to support our growing field force of financial advisors across the country, as well as our corporate office employees in Milwaukee and New York. As we continue to grow, we believe diversity makes us stronger in shaping the future of financial security. Explore career opportunities with us: https://jobs.northwesternmutual.com/. Financial representatives and interns are independent contractors, not Northwestern Mutual employees. https://www.northwesternmutual.com/social-media-guidelines

Manappuram Finance Limited

cb manappuram.com

Manappuram Finance Ltd. is one of India’s largest and most trusted gold loan companies, with 4,199 branches across the length and breadth of the country. It currently has nearly Rs. 157.65 billion worth assets under management (AUM), and 20,185 employees. Promoted by Shri. V.P. Nandakumar, the current MD & CEO, the company was founded in the modest coastal village of Valapad (Thrissur District) by his late father Mr. V.C. Padmanabhan in 1949. The first non-banking financial company (NBFC) in Kerala to receive a Certificate of Registration issued by the RBI, it was also among the earliest to go for an IPO in 1995. In 2007 Sequoia Capital invested Rs.700 million along with Hudson Equity Holdings, heralding a period of accelerated growth, and in 2010 it became the first NBFC in Kerala to obtain the highest short term credit rating of A1+ from ICRA. In 2010, it became the first Kerala-based NBFC to offer ESOPs (Employee Stock Option Plan) to its middle and senior management functionaries. As a pioneer and trailblazer, Manappuram Finance Ltd. has always been an innovator par excellence in the gold loan product and the adoption of technology. Besides focus on the business, the cause of the wider community is central to the vision of the company. The Manappuram Foundation was established in October 2009 to drive the company’s initiatives in Corporate Social Responsibility (CSR). In recent years, the company has diversified into new business areas like micro-finance, vehicle and housing finance, and SME lending through the subsidiaries Manappuram Home Finance Ltd, Manappuram Insurance Brokers Ltd, and Asirvad Microfinance Limited. Our mission is to make life easy for common people of India with instant and easy loans, with a vision of unlocking the value of their savings in gold jewellery.

FactSet

factset.com

FactSet creates flexible, open data and software solutions for tens of thousands of investment professionals around the world, providing instant access to financial data and analytics that investors use to make crucial decisions. For 40 years, through market changes and technological progress, our focus has always been to provide exceptional client service. From more than 60 offices in 23 countries, we’re all working together toward the goal of creating value for our clients, and we’re proud that 95% of asset managers who use FactSet continue to use FactSet, year after year. As big as we grow, as far as we reach, and as successful as we become, we stay connected to our clients and to each other.

Fidelity Investments

fidelity.com

Fidelity’s mission is to strengthen the financial well-being of our customers and deliver better outcomes for the clients and businesses we serve. Fidelity’s strength comes from the scale of our diversified, market-leading financial services businesses that serve individuals, families, employers, wealth management firms, and institutions. With assets under administration of $15.0 trillion, including discretionary assets of $5.9 trillion as of March 31, 2025, we focus on meeting the unique needs of a broad and growing customer base. Privately held for 78 years, Fidelity employs more than 77,000 associates across the United States, Ireland, and India. For our Terms and Conditions, please visit http://go.fidelity.com/LIterms

Sanlam

sanlam.co.za

We’ve finally given a name to that special something a person exudes when they have a plan for their finances. It’s called The F Factor – and now that you know its name, it’s time you feel it too. Let's unlock your financial confidence, together. Our team is online weekdays 8:30 – 16:00

Societe Generale Corporate and Investment Banking - SGCIB

societegenerale.com

We support you over time, during expansion phases and their more challenging periods alike. By providing a full range of solutions suited to your needs, we play a facilitating role to help you realise your ambitions and leverage your potential. This is why we intend to develop an authentic advisory relationship for all of your financial issues, specifically risk anticipation and management. Our model is based on both bankers who have a very detailed knowledge of their clients and the sectors in which they are active, as well as a broad cross-asset view of the bank’s various products and experts who bring sophisticated technical skill to their work. This client coverage model, though not in itself unique to Societe Generale, finds a better home there because of the bank’s ability to pool expertise in order to provide bespoke solutions to your needs. As a key pillar of the Societe Generale Group’s universal banking model, SG CIB supports the economy by playing a key intermediary role, offering broad market access to issuers and smart investment solutions to investors. The service we bring to our corporate and financial institutions clients revolves around three main activities - investment banking, financing and markets - and our global franchises of equity derivatives and natural resources. For our clients we stand out because we are a trusted advisor with a worldwide leading engineering expertise and a quality product suite.

Natixis Corporate & Investment Banking

cb natixis.com

Natixis Corporate & Investment Banking is a leading global financial institution that provides advisory, investment banking, financing, corporate banking and capital markets services to corporations, financial institutions, financial sponsors and sovereign and supranational organizations worldwide. Our teams of experts in around 30 countries advise clients on their strategic development, helping them to grow and transform their businesses, and maximize their positive impact. Natixis CIB is committed to aligning its financing portfolio with a carbon neutrality path by 2050 while helping its clients reduce the environmental impact of their business. As part of Groupe BPCE, the second largest banking group in France through the Banque Populaire and Caisse d’Epargne retail networks, Natixis CIB benefits from the Group’s financial strength and solid financial ratings (Standard & Poor's: A, Moody's: A1, Fitch Ratings: A+, R&I: A+).

Loading…

NEWS

Bitcoin Depot CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 10, 2025 07:00 AM

Cybersecurity News: AMD has CPU meltdown, Mozilla Thunderbird has vulnerabilities, Indian defense sector attacked

In today's cybersecurity news… AMD warns of new Meltdown, Spectre-like bugs affecting CPUs. AMD disclosed a new side-channel vulnerability...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53541

SUMMARY

OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a special case allows any argument whose name starts with `ot_` to bypass this filter. While two system arguments (`ot_executionTrackingId` and `ot_username`) are injected by OliveTin and overridden, all other `ot_`-prefixed arguments supplied by the user pass through unmodified. These bypassed arguments are not type-checked — the validation loop only iterates over the action's defined arguments, so `ot_`-prefixed arguments skip all type safety checks entirely; set as environment variables — via `buildEnv()`, with completely unvalidated values, and passed to the executed command; and included in the template context — available as `.Arguments.ot_*` in template rendering. Commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d contains a patch.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-53525

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext passwords. An attacker can exploit timing differences to extract the server-computed hash character by character, then authenticate using the correct hash without knowing the password. Version 4.9.1 fixes the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.2

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-vhv8-g2r9-cwcc

CVE-2026-53524

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated relay user can send a small compressed WebSocket frame (~100 bytes) that decompresses to gigabytes, exhausting all server memory and crashing the entire WeeChat process. The api protocol enables permessage-deflate and requires authentication before WebSocket upgrade. Version 4.9.1 patches the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-v2v4-45wm-5cr3

CVE-2026-53499

SUMMARY

FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data. FORT Validator versions through 1.6.7 contain an origin-validation error in their RRDP processing: a delegated CA under the same Trust Anchor Locator (TAL) can reference a victim CA’s public RRDP notification and snapshot URLs, causing FORT’s URL-based download cache to report success after deleting the victim’s local snapshot. Following a routine victim publication, this can silently remove the victim’s VRPs and other signed objects from FORT’s output, potentially enabling route hijacking or loss of reachability. Version 1.6.8 contains a patch that rejects cross-origin RRDP snapshot and delta URLs; as a workaround, administrators can disable HTTP/RRDP with --http.enabled=false while keeping rsync enabled, although this can leave data unavailable or stale where rsync is not supported.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/NICMx/FORT-validator/security/advisories/GHSA-qfm3-577x-rh54

CVE-2026-49360

SUMMARY

Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured with a DuckDB-backed project, an attacker can use DuckDB filesystem primitives to read and write files accessible to the Recce server process. The impact depends on how Recce is deployed, but may include disclosure of local files, tampering with Recce/dbt artifacts, modification of browser-served static files leading to stored XSS, and modification of application files if those paths are writable. If Recce is run as root, file access occurs with root privileges inside that host or container. This issue has been patched in Recce `v1.50.0`. Users should upgrade to Recce `v1.50.0` or later. The patch restricts unsafe file read/write behavior for DuckDB-backed query execution and hardens the affected query path. Other warehouse adapters have also been reviewed for similar exposure. Users who cannot upgrade immediately should avoid exposing `recce server` to the public internet or any untrusted network. Recommended mitigations include enabling authentication or placing Recce behind an authenticated reverse proxy/VPN, running Recce as a non-root user, using a read-only application filesystem where possible, and ensuring that sensitive files or credentials are not available to the Recce process.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…