A crypto theft estimated at $120 million was carried out using an exploit modeled on the fractional-skimming scheme depicted in the 1999 film Office Space, Gizmodo reports. The technique, familiar to anyone who has seen the movie, involves siphoning tiny, individually negligible amounts of value from a very large number of transactions so that no single victim notices the loss.

The comparison is more than color. In the film, programmers redirect rounded-off fractions of cents from a bank's interest calculations into a private account. The reported crypto exploit applies the same logic to on-chain or platform-level transaction flows, where rounding remainders and micro-differences in value are normally absorbed as noise rather than accounted for line by line.

Why does the $120 million figure matter?

The scale is the story. A salami-slicing attack works only at volume: each individual deduction must stay below the threshold a user or system would notice, which means the operator needs millions of operations to accumulate a nine-figure total. A $120 million haul implies either an extended operation window before detection or access to a high-throughput environment where small discrepancies escape routine reconciliation.

For practitioners, that points to a specific control gap. Standard exchange and protocol dashboards aggregate balances and reconcile at the account level, not at the per-transaction rounding layer. An exploit that lives inside that reconciliation blind spot can run indefinitely if no counterparty is comparing expected versus actual transfers at the micro-unit scale.

What does this change for operators?

Three operational consequences follow from the reported technique:

• Reconciliation granularity must extend to the smallest unit of account, not merely to net balances. Fractional-cent discrepancies aggregated across millions of transfers are invisible to account-level checks.
• Anomaly monitoring keyed to sudden large outflows will not flag this class of attack. Detection depends on statistical baselines of rounding behavior over time.
• Incident response plans should assume a slow-exfiltration scenario, where the forensic window spans months of transactions rather than a single block or transfer.

The cultural shorthand is doing real work

The Office Space framing has become standard shorthand in financial-crime reporting because it accurately describes the mechanics: distributed theft, per-victim invisibility, aggregate impact. Regulators and compliance teams use the same taxonomy for traditional salami attacks in banking systems, which means the crypto case sits in an already-classified category of fraud rather than requiring novel legal theory.

That classification carries consequences. If the exploit is treated as computer fraud rather than a smart-contract failure, the enforcement posture shifts from code auditing toward criminal process, subpoenas for transaction records, and tracing of the accumulated funds across whatever chain or chains the operator used.

What comes next

Recovery in cases of this structure depends on where the aggregated value eventually consolidates. Sliced proceeds must be pooled to become usable, and that consolidation event, not the theft itself, is typically the moment investigators can act. Expect follow-on reporting to focus on wallet clustering around those aggregation points.