Huobi's HTX exchange, formerly known as Huobi, has been hacked multiple times. The first hack occurred on September 24, 2023, resulting in a loss of $7.9 million
Justin Sun reported a hacker attack on the hot wallet of the HTX exchange and the Heco Bridge cross-chain bridge. All operations on the platforms are suspended.
Sun assured that the trading platform will compensate for the lost funds at its own expense. Details of the incident will be made public after the investigation is completed. PeckShield researchers were among the first to notice the problem. Initially, they noticed the withdrawal of 10,145 ETH (~$19 million) from the Heco bridge.
After this, the hacker continued to withdraw other cryptocurrencies - the total damage amounted to about $86.6 million.
PeckShield also noted that the transaction for the transfer of funds was confirmed by the operator, so the scenario of its compromise is being considered.
According to Igor Igamberdiev, head of the Wintermute research department, there was an additional exploit of the HTX exchange itself for $23.4 million. He claims that the withdrawal of funds occurred immediately after the attack on the cross-chain bridge and according to a similar scheme.
Heco Bridge was launched to provide low-cost interconnection between Ethereum and the HTX-backed Heco Chain blockchain. The project was a combination of the Tron protocols and the BitTorrent bridge ecosystem.
On November 10, the Poloniex exchange owned by Sun was attacked with $125 million in cryptocurrencies. Then the head of the platform announced “the successful identification and freezing of part of the assets associated with the hacker’s addresses.” He also offered the burglar to return the coins for a reward of 5% of the stolen amount.
Sun later said that the Poloniex team had identified the attacker and increased the payout to $10 million. If the hacker does not transfer the funds by November 25, law enforcement “from several countries will begin to act,” he threatened.
Let us recall that in September, HTX lost 5,000 ETH ($7.9 million at that time) as a result of a hot wallet attack. About two weeks later, the hacker returned the stolen assets for a reward of 250 ETH.
Justin Sun reported a hacker attack on the hot wallet of the HTX exchange and the Heco Bridge cross-chain bridge. All operations on the platforms are suspended.
Sun assured that the trading platform will compensate for the lost funds at its own expense. Details of the incident will be made public after the investigation is completed. PeckShield researchers were among the first to notice the problem. Initially, they noticed the withdrawal of 10,145 ETH (~$19 million) from the Heco bridge.
After this, the hacker continued to withdraw other cryptocurrencies - the total damage amounted to about $86.6 million.
PeckShield also noted that the transaction for the transfer of funds was confirmed by the operator, so the scenario of its compromise is being considered.
According to Igor Igamberdiev, head of the Wintermute research department, there was an additional exploit of the HTX exchange itself for $23.4 million. He claims that the withdrawal of funds occurred immediately after the attack on the cross-chain bridge and according to a similar scheme.
Heco Bridge was launched to provide low-cost interconnection between Ethereum and the HTX-backed Heco Chain blockchain. The project was a combination of the Tron protocols and the BitTorrent bridge ecosystem.
On November 10, the Poloniex exchange owned by Sun was attacked with $125 million in cryptocurrencies. Then the head of the platform announced “the successful identification and freezing of part of the assets associated with the hacker’s addresses.” He also offered the burglar to return the coins for a reward of 5% of the stolen amount.
Sun later said that the Poloniex team had identified the attacker and increased the payout to $10 million. If the hacker does not transfer the funds by November 25, law enforcement “from several countries will begin to act,” he threatened.
Let us recall that in September, HTX lost 5,000 ETH ($7.9 million at that time) as a result of a hot wallet attack. About two weeks later, the hacker returned the stolen assets for a reward of 250 ETH.