On April 9, on-chain investigator ZachXBT revealed that the U.S. Bitcoin ATM operator Bitcoin Depot (BTM) reported a security incident in an 8-K filing submitted to the U.S. Securities and Exchange Commission (SEC), stating that approximately 50.9 BTC (around $3.6 million) was stolen on March 23. However, the investigation indicated that the actual incident occurred as early as March 20, meaning the company did not detect the funds being transferred out until about three days later. Through on-chain tracking, 19 highly credible related addresses were identified, involving a total of approximately 54.45 BTC (around $3.7 million), which is higher than the company's disclosed amount, with a discrepancy of about 3.55 BTC potentially linked to employees' personal accounts. The flow of funds shows that about 54 BTC ultimately transferred to the cryptocurrency exchange KuCoin. As of now, these involved addresses have not been flagged by mainstream compliance monitoring tools.