{"id":24433,"date":"2025-06-02T13:49:24","date_gmt":"2025-06-02T10:49:24","guid":{"rendered":"https:\/\/forklog.com\/en\/hackers-extract-14-5-million-from-nervos-network-and-bitopro-platforms\/"},"modified":"2025-06-02T13:49:24","modified_gmt":"2025-06-02T10:49:24","slug":"hackers-extract-14-5-million-from-nervos-network-and-bitopro-platforms","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/hackers-extract-14-5-million-from-nervos-network-and-bitopro-platforms\/","title":{"rendered":"Hackers Extract $14.5 Million from Nervos Network and BitoPro Platforms"},"content":{"rendered":"<div class=\"wp-block-text-wrappers-keypoints article_keypoints\">\n<ul class=\"wp-block-list\">\n<li>On May 8, $11.5 million was siphoned from the hot wallet of Taiwan&#8217;s BitoPro. The team has only now disclosed the incident. <\/li>\n<li>The modular blockchain Nervos Network suffered a $3 million attack. <\/li>\n<\/ul>\n<\/div>\n<p>On-chain investigator ZachXBT <a href=\"https:\/\/t.me\/investigations\/254\">highlighted<\/a> a suspicious outflow of digital assets worth $11.5 million from the hot wallets of Taiwan&#8217;s cryptocurrency exchange BitoPro, which occurred on May 8.\u00a0<\/p>\n<p>The incident affected coins in the Tron, Ethereum, Solana, and Polygon networks. According to the researcher, the thieves have already transferred the assets to the crypto mixer Tornado Cash, partially converting them into Bitcoin via Thorchain, and then sent them to a private Wasabi Wallet.<\/p>\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"779\" height=\"1024\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/BitoNotice-779x1024.png\" alt=\"BitoNotice\" class=\"wp-image-259758\" style=\"width:642px;height:auto\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/BitoNotice-779x1024.png 779w, https:\/\/forklog.com\/wp-content\/uploads\/BitoNotice-228x300.png 228w, https:\/\/forklog.com\/wp-content\/uploads\/BitoNotice-768x1009.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/BitoNotice.png 974w\" sizes=\"auto, (max-width: 779px) 100vw, 779px\" \/><figcaption class=\"wp-element-caption\">Movement of BitoPro funds and platform representatives&#8217; announcement. Source: Telegram.\u00a0<\/figcaption><\/figure>\n<p>Representatives of the trading platform <a href=\"https:\/\/t.me\/BitoProAnnouncement\/2249\">announced<\/a> the fund leakage only on June 2 \u2014 26 days after the attack. On May 9, the exchange announced &#8220;technical maintenance&#8221; and suspended withdrawals.\u00a0<\/p>\n<p>In a recent statement, BitoPro representatives confirmed the breach. According to the message, the hot wallet was attacked during the coin transfer process.\u00a0<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cAt the time of the incident, an emergency response mechanism immediately activated, safely transferring the platform&#8217;s assets to a new wallet and blocking the hacker activity, as well as commissioning an external professional cybersecurity company to conduct a comprehensive investigation and tracking,\u201d reads the translated statement from Chinese.<\/p>\n<\/blockquote>\n<p>BitoPro representatives claim that the platform&#8217;s digital asset reserves are secured, and users&#8217; rights and interests are unaffected. Detailed information about the attack and the reasons for the announcement delay remain undisclosed.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Modular Protocol Breach<\/strong><\/h2>\n<p>On June 2, Cyvers Alerts analysts <a href=\"https:\/\/x.com\/CyversAlerts\/status\/1929428359856935185\">identified<\/a> a series of suspicious transactions linked to the modular blockchain Nervos Network. The perpetrators managed to extract assets totaling ~$3 million, including:\u00a0<\/p>\n<ul class=\"wp-block-list\">\n<li>257,800 USDT;<\/li>\n<li>898,300 USDC;<\/li>\n<li>60,300 DAI;<\/li>\n<li>539.09 ETH;<\/li>\n<li>0.79 WBTC.<\/li>\n<\/ul>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"544\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/Gsa02RQWEAA8k7Q-1024x544.jpg\" alt=\"Gsa02RQWEAA8k7Q\" class=\"wp-image-259762\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/Gsa02RQWEAA8k7Q-1024x544.jpg 1024w, https:\/\/forklog.com\/wp-content\/uploads\/Gsa02RQWEAA8k7Q-300x159.jpg 300w, https:\/\/forklog.com\/wp-content\/uploads\/Gsa02RQWEAA8k7Q-768x408.jpg 768w, https:\/\/forklog.com\/wp-content\/uploads\/Gsa02RQWEAA8k7Q-1536x816.jpg 1536w, https:\/\/forklog.com\/wp-content\/uploads\/Gsa02RQWEAA8k7Q.jpg 1962w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Hackers&#8217; address. Source: X.<\/figcaption><\/figure>\n<p>The criminals exchanged all assets for Ethereum and then sent them to Tornado Cash.<\/p>\n<p>The protocol team has suspended all smart contracts and initiated an investigation.\u00a0<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">We\u2019ve detected abnormal activity on <a href=\"https:\/\/twitter.com\/hashtag\/ForceBridge?src=hash&#038;ref_src=twsrc%5Etfw\">#ForceBridge<\/a> and have paused the service as a precaution. Our team is investigating.<br \/>Updates will be shared ASAP. Thank you for your patience.<\/p>\n<p>\u2014 Magickbase (@magickbase) <a href=\"https:\/\/twitter.com\/magickbase\/status\/1929375666396418247?ref_src=twsrc%5Etfw\">June 2, 2025<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Back in May, losses to the crypto industry from hacks <a href=\"https:\/\/forklog.com\/en\/news\/cryptocurrency-industry-faces-244-million-loss-from-may-hacks\">reached<\/a> $244 million. This figure was 40% lower than the previous month.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On May 8, $11.5 million was siphoned from the hot wallet of Taiwan&#8217;s BitoPro. The team has only now disclosed the incident. The modular blockchain Nervos Network suffered a $3 million attack. On-chain investigator ZachXBT highlighted a suspicious outflow of digital assets worth $11.5 million from the hot wallets of Taiwan&#8217;s cryptocurrency exchange BitoPro, which [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":24432,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"","news_style_id":"","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1166,44],"class_list":["post-24433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-centralized-exchanges-cex","tag-cybercrime"],"aioseo_notices":[],"amp_enabled":true,"views":"173","promo_type":"","layout_type":"","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/24433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=24433"}],"version-history":[{"count":0,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/24433\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/24432"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=24433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=24433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=24433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}