Peckshield, a prominent blockchain security firm, has uncovered a significant theft involving the Hedera network, where approximately $5.25 million was reportedly drained and transferred to Ethereum. This alarming discovery was made public on July 11, highlighting vulnerabilities within the network.
The malicious actor, who seemingly initiated the exploit, funneled their wallet with 1 ETH obtained from the mixing service Tornado Cash. This wallet now contains around 2,360 ETH, valued at approximately $4.25 million, alongside 15.58 wrapped bitcoin (WBTC), which amounts to roughly $1 million.
Interestingly, Hedera has yet to officially verify this breach, leaving many questions unanswered about the full extent of the theft. On July 11, the native token HBAR was trading around $0.07, reflecting a nearly 3% decrease over the previous 24 hours. The muted market reaction suggests that investors remain cautious as the investigation is still in its early stages, with neither the specific attack method nor targeted applications disclosed.
This exploit follows a trend in which attackers utilize crypto mixers to conceal illicit funds before moving them to more accessible platforms like Ethereum. Notably, cross-chain bridge breaches alone accounted for more than $328 million in losses during the first few months of this year. Recent incidents have mirrored this approach, with attackers leveraging similar tactics, as evidenced by a recent theft involving $11.5 million in Verus assets.
Hedera is no stranger to security issues; a previous incident in March 2023 saw attackers exploit a vulnerability in the network’s smart contract services, draining liquidity from various decentralized exchanges, although that incident resulted in losses of under $600,000. The response time to those breaches, which included fixes implemented within just 41 hours, will now be a benchmark for the current situation.
As the story unfolds, the attention now turns to Hedera’s team and their response to this breach, especially as they have not yet acknowledged the incident publicly. Investors and stakeholders alike will be monitoring their actions closely.
This material is for informational purposes only and does not constitute financial advice.
