Huobi’s ‘Heco’ chain bridge drained of $87M in crypto assets

The HTX exchange has been hit by a security breach, similar to the recent Poloniex hack

article-image

ADragan/Shutterstock modified by Blockworks

share

The bridge connecting the HTX exchange (formerly Huobi) and Ethereum was exploited for approximately $87 million in crypto assets early Wednesday.

Large quantities of ether, tether (USDT) and a wrapped version of bitcoin (HBTC) were seen leaving the bridge for a previously unused Ethereum wallet.

The suspicious transactions were first analyzed by various blockchain security firms including CertiK, Peckshield and Cyvers.

According to CertiK, the bridge’s private key was likely compromised.

“The suspicious transactions were initiated by the Huobi HECO Bridge operator wallet indicating that this wallet was compromised,” a CertiK spokesperson told Blockworks.

Read more: Crypto exchange HTX loses $8M in weekend hack

Various other ERC-20 tokens were drained, swapped for ether, and distributed to at least 8 other wallets.

Two hot wallets of HTX Global (formerly Huobi) lost funds, according to Cyvers. Board member Justin Sun confirmed the incident on X.

“HTX and Heco Cross-Chain Bridge Undergo Hacker Attack. HTX Will Fully Compensate for HTX’s hot wallet Losses,” Sun said.

Justin Sun assumed control over the Huobi Eco Chain in October 2022, Bloomberg previously reported, although Sun denied he owns a majority stake. He referred to it as a merger with the Tron and BitTorrent Chain ecosystems, which he also controls.

The primary purpose of the HECO bridge is to enable the movement of digital assets between the Huobi Eco Chain and other blockchain networks, such as Ethereum.

The HECO hack is not an isolated incident but rather part of a pattern of security lapses in blockchain projects associated with Sun. Poloniex, an exchange acquired by Sun, suffered a $100 million exploit two weeks ago, which security analysts believe also may have resulted from compromised private keys.

Poloniex officials have been in the process of negotiating with the hacker in that case.

It’s not yet clear if the two thefts are directly related.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the Forward Guidance newsletter.

Get alpha directly in your inbox with the 0xResearch newsletter — market highlights, charts, degen trade ideas, governance updates, and more.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 18 - 20, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Unlocked Advisory.jpg

Research

ACP-125 represents a strategic opportunity to enhance Avalanche's competitive position in the Layer-1 blockchain ecosystem. Based on our previous ACP-77 analysis paired with an analysis of ACP-125, Avalanche is prioritizing kick-starting growth and network effects in its ecosystem while trading off short-term value accrual.

article-image

Plus, TapSwap plans to solve tap-to-earn with an all-new Web3 gaming platform

article-image

There are a few possible outcomes now that Trump will be moving back to Washington in January

article-image

Daily validator revenue has been in excess of $30 million every day since mid-October

article-image

As part of SIP-411, KWENTA tokens will be redeemable for SNX and subsequently deprecated

article-image

Ethereum’s 200th ACD call brought updates on the Pectra upgrade and the new Mekong testnet — just in time for Devcon in Thailand

article-image

Vance Spencer says Framework won’t be going anywhere