{"id":65270,"date":"2023-11-22T10:55:12","date_gmt":"2023-11-22T14:55:12","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=65270"},"modified":"2023-11-22T10:55:15","modified_gmt":"2023-11-22T14:55:15","slug":"heco-chain-bridge-loses-over-86-6m-due-to-suspected-hack","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/heco-chain-bridge-loses-over-86-6m-due-to-suspected-hack\/","title":{"rendered":"HECO Chain Bridge Loses Over $86.6M Due to Suspected Hack"},"content":{"rendered":"\n<p>PeckShield, a <a href=\"https:\/\/coinscreed.com\/staging\/blockchain-security-startup-blockaid-secures-33m-in-funding.html\" target=\"_blank\" rel=\"noreferrer noopener\">blockchain security<\/a> platform, has disclosed that digital assets worth over $86.6 million were transmitted from the HECO Chain bridge to addresses that appear to be suspicious. The security firm hypothesizes that an ongoing exploit has compromised the bridge.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"557\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86-1024x557.png\" alt=\"HECO Chain Bridge Loses Over $86.6M Due to Suspected Hack\" class=\"wp-image-65281\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86-1024x557.png 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86-300x163.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86-768x418.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86-18x10.png 18w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86-750x408.png 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86-1140x620.png 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86.png 1312w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">HECO Chain Bridge Loses Over $86.6M Due to Suspected Hack<\/figcaption><\/figure>\n\n\n\n<p><a href=\"https:\/\/coinscreed.com\/staging\/justin-sun-announces-his-return-to-hong-kong.html\" target=\"_blank\" rel=\"noreferrer noopener\">Tron founder Justin Sun<\/a> issued the following statement in response to the incident: HTX will fully compensate users for any losses sustained due to the breach. <\/p>\n\n\n\n<p>During their investigation into the incident, the organization temporarily suspended deposits and withdrawals. Following the conclusion of the investigation, services will recommence, according to the executive.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">HTX and Heco Cross-Chain Bridge Undergo Hacker Attack. HTX Will Fully Compensate for HTX&#39;s hot wallet Losses. Deposits and Withdrawals Temporarily Suspended. All Funds in HTX Are Secure, and the Community Can Rest Assured. We are investigating the specific reasons for the hacker\u2026<\/p>&mdash; H.E. Justin Sun \u5b59\u5b87\u6668 (@justinsuntron) <a href=\"https:\/\/twitter.com\/justinsuntron\/status\/1727304656622326180?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">November 22, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>At the outset, PeckShield issued a warning regarding a transaction involving the transfer of 10,145 Ether from the bridge, estimated to be worth approximately $19 million. Several additional trades ensued, involving the transmission of digital assets to different addresses, including USD Coin, Chainlink, <a href=\"https:\/\/coinscreed.com\/staging\/robinhood-expands-crypto-services-to-nevada-with-shiba-inu.html\" target=\"_blank\" rel=\"noreferrer noopener\">Shiba INU<\/a>, and others.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/PeckShieldAlert?src=hash&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#PeckShieldAlert<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> Suspicious huge withdrawal of 10,145 <a href=\"https:\/\/twitter.com\/search?q=%24ETH&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$ETH<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> (~$19m) from <a href=\"https:\/\/twitter.com\/hashtag\/Heco_Bridge?src=hash&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#Heco_Bridge<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a>.   <a href=\"https:\/\/twitter.com\/justinsuntron?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@justinsuntron<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><br><br>Note the tx is initiated by the operator. Looks like a compromised operator?<a href=\"https:\/\/t.co\/thBVveuL6X\" target=\"_blank\">https:\/\/t.co\/thBVveuL6X<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> <a href=\"https:\/\/t.co\/th4Ui0FO3A\" target=\"_blank\">pic.twitter.com\/th4Ui0FO3A<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/p>&mdash; PeckShieldAlert (@PeckShieldAlert) <a href=\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1727286692489679360?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">November 22, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>Officially introduced on December 21, 2020, HTX Eco Chain (HECO) offers a cross-chain experience at reduced petroleum costs. The endeavor involved the consolidation of Tron and the <a href=\"https:\/\/bttc.bittorrent.com\/bridge\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">bridge ecosystem of BitTorrent<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a>; in 2022, Sun merged the two ecosystems to form HECO.<\/p>\n\n\n\n<p>Recent HECO Chain compromises represent the second exploit of a Sun-related project in recent memory. Poloniex, an exchange that Sun acquired in 2018, was the target of a $100 million breach on November 10. Security analysts believe that compromised private keys could have contributed to the incident.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>PeckShield, a blockchain security platform, has disclosed that digital assets worth over $86.6 million were transmitted from the HECO Chain bridge to addresses that appear to be suspicious. The security firm hypothesizes that an ongoing exploit has compromised the bridge. Tron founder Justin Sun issued the following statement in response to the incident: HTX will [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":65281,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[5817,13134,17324,5291],"class_list":["post-65270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-hack-2","tag-cross-chain-bridges","tag-heco-chain","tag-justin-sun"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/11\/image-86.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/65270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=65270"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/65270\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/65281"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=65270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=65270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=65270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}