Heco Bridge Exploit
2023-11-23 • Certi K •
https://www.certik.com/ko/resources/blog/heco-bridge-exploit
CertiK reports that the Heco Bridge and HTX hot-wallet compromise caused about $113.3 million in suspicious losses across Ethereum, TRON, and possibly Bitcoin. The bridge loss followed compromise of the Heco Bridge operator wallet, allowing withdrawToken calls that moved roughly $87 million in assets before the attacker swapped ERC-20 tokens for ETH and distributed funds across multiple wallets. CertiK also traced HTX hot-wallet transfers, including Ethereum, TRON, stablecoin, and 73.797 BTC movements, while noting some Bitcoin loss was not confirmed at the time of writing. The source treats the incident as a private-key compromise affecting centralized crypto infrastructure and does not attribute it to DPRK actors.