HECO Chain bridge compromised over $86.6M sent to suspicious addresses

Blockchain security firm PeckShield reported that assets like stablecoins, ETH, SHIB, LINK and more were transferred from the bridge. Withdrawals and deposits have been suspended, and Justin Sun has said HTX will fully compensate users for any losses.

Data shared by blockchain security platform PeckShield shows that more than $86.6 million in digital assets were transferred from the HECO Chain bridge to suspicious addresses. The security firm suggests that the bridge is compromised and an exploit is ongoing. 

In response to the incident, Tron founder Justin Sun announced that HTX will fully compensate users for any losses incurred in the hack. The company has also temporarily suspended deposits and withdrawals as they investigate the incident. The executive said services will resume after the investigation is completed.

Initially, PeckShield published an alert pointing out a transaction where 10,145 Ether

ETH

$2,158 , worth around $19 million, was transferred from the bridge. Several other transactions followed, with digital assets like USD Coin

USDC

$1.00 , Chainlink

LINK

$16.01 , Shiba INU

SHIB

$0.000008 and more, were transferred to other addresses.

HTX Eco Chain, or HECO, was officially launched on Dec. 21, 2020, to provide a cross-chain experience with lower gas fees. The project was a merger between Tron and BitTorrent’s bridge ecosystem, with Sun combining both ecosystems into HECO in 2022.

The recent HECO Chain hack is the second recent exploit of a project related to Sun. On Nov. 10, an exchange acquired by Sun in 2018, Poloniex, suffered a $100 million exploit. Security analysts believe that the incident may have resulted from compromised private keys.