Suspected exploit on Hedera network moved ~$5.25M in assets from Hedera to Ethereum via the LayerZero bridge; Hedera has not officially confirmed.
On July 11, 2026, a suspected exploit on the Hedera network moved approximately $5.25M in assets from Hedera to Ethereum via the LayerZero bridge. The attacker funded a wallet with 1 ETH via Tornado Cash, bridged the assets, and swapped WBTC for ETH. The attacker wallet held approximately 2,360 ETH (~$4.25M) and 15.58 WBTC (~$1M). Hedera has not officially confirmed the incident. HBAR dropped approximately 2% following the reports.
Attacker funded wallet with 1 ETH via Tornado Cash. Bridged assets from Hedera to Ethereum via LayerZero, then swapped WBTC for ETH. Attacker wallets: 0x9A4966152F6e10b33Cb7a37975e8619816d6a494, 0xaf20D792A19fD42dCf697ceBa6100291D96dD93e.
0x9A4966152F6e10b33Cb7a37975e8619816d6a4940xaf20D792A19fD42dCf697ceBa6100291D96dD93e