HTX and HECO BRIDGE are suspected of being stolen over 100 million USD

ChainCatcher news, according to @CyversAlerts, HTX hot wallet has experienced suspicious transactions, suspected losses exceeding $12.4 million. Additionally, The Block reported that unexpected fund movements indicate losses exceeding $110 million for HECO BRIDGE and HTX.

On-chain records show that 2 hours ago, HECO Chain Bridge transferred a large amount of tokens to an empty address (starting with 0xFc146D), including 42.11 million USDT, 10,000 ETH, 489 BTC, and other assets worth over $84 million. Among them, USDT and BTC were all converted to ETH through DEXs like Uniswap and 1inch after being transferred to a new address: 0xe47e6dA16Bb83EB0FD26b3F29b15CE8Fab089B9e ($62.37 million), 0x6A40dfe3008Bc3f99907e6DFf4d041F933493411 ($15.96 million).

According to OKLink's analysis of the hacker attack process, the transaction initiator extracted assets through the withdrawNative call, which implements a mechanism similar to multi-signature, requiring two transactions to complete a withdrawal process. The first transaction changes the status to TASKPROCESSING, and the second transaction changes the status to TASKDONE, completing the withdrawal.