An exploit on the Hedera network has resulted in losses exceeding $5 million, with stolen funds being quickly transferred to Ethereum. The incident occurred on July 11 and has raised concerns about the platform's traceability and security features.
Details of the Exploit
The attacker managed to siphon over $5 million from Hedera by bridging the stolen assets to Ethereum. They utilized LayerZero, a cross-chain protocol, to convert Wrapped Bitcoin (WBTC) to Ether (ETH). Initial reports indicated that the hack had resulted in a loss surpassing $3.7 million, but within hours, this figure rose to over $5 million. This rapid escalation highlights the efficiency with which the exploited funds were transferred.
Investigator Specter first brought the hack to public attention via social media platform X, noting that the total loss had reached $5 million shortly after the incident. Following Specter's reports, PeckShieldAlert confirmed the amount moved from Hedera to Ethereum, estimating that $5.25 million had already been bridged.
Tracing the Attacker's Moves
The responsible wallet has been traced back to funds associated with Tornado Cash, a platform known for facilitating anonymous transactions. PeckShieldAlert reported that the attacker's wallet now contains approximately 2,360 ETH, valued at around $4.25 million, alongside 15.58 WBTC worth about $1 million. A third observer account verified that over $4 million had transitioned to Ethereum, indicating that the bridge method used was successful in executing the transfer.
Despite the technical tracing capabilities within the blockchain industry, reactions from experts suggest that the Hedera network's unique design complicates the identification of compromised funds. Hedera operates on a hashgraph consensus system rather than a conventional blockchain, a structural choice criticized for fostering difficulties in auditing and traceability. Investigator ZachXBT commented on this matter, pointing out that the platform effectively functions as a privacy chain due to the limitations of its block explorer.
Implications for Hedera
In addition to the immediate financial damage, the exploit could have longer-term effects on Hedera's reputation. The network is governed by a consortium of major companies, which may find ongoing scrutiny after such events. If the platform fails to address the traceability issues highlighted by this incident, it risks losing trust among users and investors alike.
This material is informational and should not be considered financial advice.
