IoTeX Suffers $8 Million Hack After Private Key Compromise

As the crypto industry adopts AI-focused blockchain netowrk it is exposing itself to more security risks. IoTeX, a blockchain platform built for real-world AI, recently suffered a major security hack, resulting in nearly $8 million in losses.

Here’s how the IoTeX $8 million hack happen & how the IoTeX team is responding to it. Are users’ funds safe?

How IoTeX $8 Million Hack happen?

PeckShield, a blockchain security firm, said the hacker carried out the attack after compromising a private key. As a result, the hacker had complete access to the token safe and could take out various cryptocurrency assets.

The hacker compromised several tokens, including USDC, USDT, IOTX, PAYG, WBTC, and BUSD. They withdrew these assets directly from the smart contract vault, showing they had authorized access rather than exploiting a smart contract bug.

The attack turned serious when the hacker allegedly used the same access to create 111 million CIOTEX tokens.

This unauthorized token creation increased the scale of the damage and raised concerns about token supply integrity.

Stolen Funds Converted From ETH to Bitcoin

The hacker quickly began the process of transferring the stolen assets after stealing the money.

Later, the hacker traded the stolen tokens for Ethereum. The hacker then used the THORChain cross-chain protocol to bridge Ethereum to Bitcoin.

This step makes tracking and recovery more difficult, as funds move across different blockchain networks and become harder to freeze.

Following the hack, the IoTeX native token IOTX drop 7%, trading below $0.050 with a market cap hitting $47.46 million.

• Also Read :

IoTeX Team Responds With Investigation

In reaction to the hack, IoTeX was quick to post on X confirming that they were aware of the hack and were working to investigate the issue.

The team confirmed that they were working with major crypto exchanges and blockchain security partners to trace back the stolen funds and stop any further movement.

At the same time, exchanges and partners are helping monitor wallets linked to the attacker and may freeze assets if they enter centralized platforms.

FAQs