# Exploit İlgili Makaleler

HTX Haber Merkezi, kripto endüstrisindeki piyasa trendleri, proje güncellemeleri, teknoloji gelişmeleri ve düzenleyici politikaları kapsayan "Exploit" hakkında en son makaleleri ve derinlemesine analizleri sunmaktadır.

Coldcard Hacker Moves 45% of Stolen Bitcoin Through THORChain

The hacker behind the third wave of attacks on the Coldcard wallet has accelerated the movement of stolen funds, transferring roughly 45% of the Bitcoin stolen in that wave. According to Galaxy Research, the perpetrator is using methods like THORChain to move Bitcoin to Ethereum and CoinJoin transactions to obscure the trail on the blockchain. The attacker opened 293 two-of-two multisignature vaults with the stolen Bitcoin and has begun draining the largest ones. While this activity has revealed new transaction patterns, the majority (82%) of all Bitcoin stolen across all Coldcard attack waves remains unmoved in the initial addresses. The third wave attack is part of one of 2026's largest crypto exploits, ranking third in reported losses. The incident highlights how stolen cryptocurrency can be laundered across different blockchain ecosystems.

TheNewsCrypto2 saat önce

Coldcard Hacker Moves 45% of Stolen Bitcoin Through THORChain

TheNewsCrypto2 saat önce

Bitcoin Network Used by Exchanges Hit by $320 Million Exploit, Hacker Claims to Be "Good Guy"

The Liquid Network, a Bitcoin sidechain developed by Blockstream, has been hit by an exploit resulting in the withdrawal of approximately 4,000 BTC (worth around $320 million) from its federation wallet, which held about 4,200 BTC. The network has paused all new transactions. Unlike typical hacks involving private key theft, this incident stemmed from a software vulnerability in the open-source Elements platform that underpins Liquid. The funds were withdrawn via the authorized platform SideSwap. The attacker, claiming to be a "white-hat hacker," has communicated via on-chain messages, stating the funds will be returned after the vulnerability is patched and all nodes are secured. The Liquid Network, governed by a federation of over 80 exchanges and companies, is working to restore services. This event raises security concerns for the sidechain model, designed to enable faster Bitcoin transactions. The incident follows other recent security breaches in the crypto space. Liquid has not yet announced a timeline for resuming operations or confirmed the recovery of the funds.

marsbit4 saat önce

Bitcoin Network Used by Exchanges Hit by $320 Million Exploit, Hacker Claims to Be "Good Guy"

marsbit4 saat önce

Third Wave Coldcard Wallet Attacker Moves 45% of Stolen Bitcoin

According to Galaxy Research, the attacker behind the third wave of the Coldcard wallet exploit has moved approximately 45% of the stolen Bitcoin (BTC), channeling funds through THORChain or into CoinJoin transactions. The attacker began moving funds to Ethereum via THORChain on September 2. In recent movements, the bitcoins were sent to CoinJoin rounds, which mix multiple users' payments into a single transaction to complicate fund tracing. Galaxy reported that the third-wave attacker created 293 "2-of-2" multisig vaults to store victims' coins and has been moving funds from the largest vaults in descending order of size, with the 11 largest vaults already emptied. These transactions helped Galaxy identify a previously unknown vault, likely holding funds from another Coldcard victim, though the cause of that loss remains unconfirmed. Across all Coldcard exploit waves, about 82% of the stolen bitcoin remains in the attacker's original addresses, while 18% has been moved, presumably for laundering purposes. The Coldcard exploit is the third-largest in 2026, behind the $293 million Kelp DAO hack and the $280 million Drift protocol hack, per DefiLlama.

cryptonews.ru5 saat önce

Third Wave Coldcard Wallet Attacker Moves 45% of Stolen Bitcoin

cryptonews.ru5 saat önce

Coldcard third-wave attacker moves 45% of stolen Bitcoin

According to Galaxy Research, the attacker behind the third wave of the Coldcard wallet hack has moved approximately 45% of the stolen Bitcoin. The funds were routed through THORChain to Ethereum or into CoinJoin transactions to obscure their trail. The exploiter used 293 multisignature vaults and is moving funds from the largest ones in order of size, with 11 of the biggest vaults now emptied. One previously unknown vault, likely holding another victim's funds, was identified through these transactions. Overall, about 82% of all Bitcoin stolen in the Coldcard exploit remains in the original addresses, with 18% moved for apparent laundering. The hack is the third-largest crypto exploit of 2026.

cointelegraph5 saat önce

Coldcard third-wave attacker moves 45% of stolen Bitcoin

cointelegraph5 saat önce

White Hackers Withdrew $320 Million from Liquid Network Using Artificial Token Emission

On September 6, 2026, nearly 4,000 BTC (approx. $320 million) was withdrawn from the Liquid Federation wallet on the Bitcoin sidechain, Liquid Network, by presumed "white hat" hackers. The attackers exploited a vulnerability in the Elements software, allowing them to artificially create 4,000 L-BTC tokens (pegged 1:1 to BTC) and legitimately exchange them for real Bitcoin via the peg-out mechanism. The service provider SideSwap processed the exchange, destroying the fake L-BTC and releasing the BTC from the federation's reserves. Blockstream, the developer of Liquid Network, confirmed the federated keys were not compromised. The attack only affected the L-BTC peg mechanism; other assets on Liquid were untouched. Following the incident, the attackers communicated via a Bitcoin blockchain message, identifying themselves as white hats and initiating negotiations. They have promised to return a "large part" of the funds once the vulnerability is patched. This incident highlights a recurring risk in cross-chain bridges: attacks targeting token issuance logic rather than storage keys. While the main Bitcoin chain remains unaffected, the event underscores the systemic reliance on trust in bridge code and the challenges in detecting such vulnerabilities until funds are withdrawn. Negotiations between Blockstream and the attackers are ongoing.

cryptonews.ru5 saat önce

White Hackers Withdrew $320 Million from Liquid Network Using Artificial Token Emission

cryptonews.ru5 saat önce

Harmony Proposes Shutting Down Its Layer 1 Blockchain and Migrating ONE to Ethereum

The Ethereum-compatible layer-1 blockchain Harmony has proposed shutting down its native network and migrating its ONE token to Ethereum as an ERC-20 asset, seven years after its mainnet launch. The proposal suggests taking a final snapshot of the network state, airdropping new ERC-20 ONE tokens to corresponding Ethereum addresses, and shifting exchange listings. Validators are offered options to shut down nodes, continue as stewards, or join a new AI video initiative, with a $1.372 million compensation pool reserved for those who comply. This follows an exploit less than four weeks prior, where an attacker minted nearly 4 billion counterfeit ONE tokens (~26% of supply), prompting Harmony to previously consider a blockchain rollback. The new migration plan indicates a potential shift from network recovery to termination. Users are urged to withdraw funds from smart contracts, including liquidity pools and on-chain apps—which cannot be migrated—by September 10. The proposal is non-binding, with no specified timeline for the final block or a validator governance vote, which would require a 66.7% approval stake.

cryptonews.ru8 saat önce

Harmony Proposes Shutting Down Its Layer 1 Blockchain and Migrating ONE to Ethereum

cryptonews.ru8 saat önce

Harmony proposes shutting down layer 1, migrating ONE to Ethereum

Harmony, an Ethereum-compatible layer-1 blockchain, has proposed shutting down its own network and migrating its native ONE token to Ethereum as an ERC-20 token. The plan involves taking a final network snapshot to record all ONE balances, including those in wallets, staking, and exchanges, followed by an airdrop of the new ERC-20 tokens to the corresponding Ethereum addresses. The proposal is non-binding, and key details like the final block date and whether it will go through the network's formal governance process—which requires validator voting—remain unspecified. The migration would not support multisig wallets, liquidity pools, or on-chain applications, prompting users to exit smart contracts by September 10. Validators are offered options to shut down, become governors, or join a new AI-video initiative, with a compensation pool for those complying. This proposal follows a recent exploit where an attacker minted billions of unauthorized ONE tokens, leading Harmony to previously consider a network rollback. The shift now suggests a potential move from repairing the blockchain to ending it entirely.

cointelegraph10 saat önce

Harmony proposes shutting down layer 1, migrating ONE to Ethereum

cointelegraph10 saat önce

Tectonic Attack Moves Funds from Cronos to Tornado Cash

According to PeckShield, approximately 2,658.9 ETH ($6.65 million) linked to the Tectonic exploit on the Cronos blockchain was sent to the Tornado Cash mixer. This transaction represents the portion of stolen funds Cronos could not recover after validators rolled back the blockchain following the August 30 attack. The rollback nullified the attacker's on-chain balances but failed to retrieve funds already moved to Ethereum. The attack targeted the low-liquidity TONIC token, inflating its price roughly 100-fold to borrow stablecoins from lending protocols. Total losses are estimated at around $74-75 million. While the rollback mitigated losses, it raised concerns about blockchain immutability. This incident is part of a broader trend, with 2026 seeing a record number of price manipulation exploits.

cryptonews.ru09/04 05:21

Tectonic Attack Moves Funds from Cronos to Tornado Cash

cryptonews.ru09/04 05:21

Can On-Chain Rollback Save Stolen Assets?

"Can On-Chain Rollbacks Recover Stolen Assets?" examines three recent blockchain outages (Cronos, Ontology, ICON) that used different emergency measures after security incidents. Cronos halted its network via validator consensus and performed a state rollback to a point before a Tectonic protocol exploit, erasing all transactions after that block. This protected assets still on-chain but could not recover funds already bridged to Ethereum. Ontology preemptively paused block production upon detecting a potential threat. It conducted an investigation and upgrade without rolling back the chain, aiming to resume within 24 hours. No user funds were reported lost, but service was interrupted. ICON experienced a signature replay attack during a migration phase controlled by its Foundation. Despite an alert, response delays allowed most stolen ICX to be sent to exchanges before the contract and network were paused. Recovery now depends on exchanges and legal processes. The article concludes that each emergency response shifts risk differently: Cronos sacrificed post-attack transactions, Ontology traded time for asset safety, and ICON faces the limits of on-chain control once assets leave its ecosystem. The key questions are the transparency of emergency rules, the threshold for action, whether a chain halts or rewrites history, and who bears the final loss for assets beyond the chain's reach.

marsbit09/02 07:21

Can On-Chain Rollback Save Stolen Assets?

marsbit09/02 07:21

Ontology Mainnet Remains Offline Due to 'Malicious Attacks' as Cronos and Injective Recover

The Ontology mainnet remains offline due to a "malicious attack" that prompted developers to halt block production on August 31st as a containment measure. The network is expected to stay down for at least the next 24 hours while validators conduct security checks, though user funds are claimed to be safe. In contrast, the Cronos network has resumed operations after pausing to contain a price manipulation attack on the Tectonic protocol, which initially caused significant TVL drop but has since recovered. Separately, the Injective network experienced a roughly 3.5-hour halt on the same day. While unverified social media speculation suggested a possible exploit, no breach has been confirmed by the project.

cryptonews.ru09/01 17:21

Ontology Mainnet Remains Offline Due to 'Malicious Attacks' as Cronos and Injective Recover

cryptonews.ru09/01 17:21

活动图片

Market Analysisright-arrow

Project Updatesright-arrow