On March 23, 2026, Bitcoin Depot Inc. discovered unauthorized access to certain IT systems in which an actor obtained control of credentials associated with the Company's digital asset settlement accounts and transferred approximately 50.903 Bitcoin (~$3.665 million) from Company-controlled wallets. The Company believes the incident was contained to its corporate environment and did not affect customer platforms; no evidence of customer PII access identified. Materiality determined April 6, 2026.