Gate News reports that on April 9, on-chain investigator ZachXBT revealed that U.S. Bitcoin ATM operator Bitcoin Depot (BTM) stated in an 8-K filing with the U.S. Securities and Exchange Commission (SEC) that the company discovered a security incident on March 23, resulting in approximately 50.9 BTC (about $3.6 million) being stolen. The investigation indicated that the actual occurrence of the incident dates back to March 20, meaning the funds were transferred out about three days before the company detected it. Through on-chain tracking, 19 high-confidence related addresses were identified, involving a total of approximately 54.45 BTC (about $3.7 million), which exceeds the company's disclosed amount by about 3.55 BTC, possibly involving employee personal accounts. The fund flow shows that about 54 BTC was ultimately transferred to a certain CEX. As of now, these involved addresses have not been flagged by mainstream compliance monitoring tools.