Hedera reportedly revealed certain threat alerts, per prior
stories. Attackers gained access to the mainnet's smart contract service code
and took control of some user accounts' Hedera Token Service (HTS) holdings by
transferring them to their own accounts.
Resolved: The vulnerability has been patched and the Hedera
mainnet is now operational and accessible.
Soon, more information about the attack will be made public.
(@hashgraph) Hedera Status March 11, 2023
They targeted accounts used as liquidity pools on numerous
DEXs, including Pangolin Hedera, SaucerSwap, and HeliSwap, that transitioned to
using the HTS through Uniswap V2-derived contracts.
The Bridge operators quickly stopped the activity as the
attackers were transferring tokens obtained through the hack to the Hashport
Network Bridge.
Hedera reportedly revealed certain threat alerts, per prior
stories. Attackers gained access to the mainnet's smart contract service code
and took control of some user accounts' Hedera Token Service (HTS) holdings by
transferring them to their own accounts.
Resolved: The vulnerability has been patched on the Hedera
mainnet, and the mainnet is now operational and accessible.
Soon, information about the attack will be made public.
The Hedera community worked with teams from Swirlds Labs, The
HBAR Foundation, Limechain, Pangolin, SaucerSwap, and HeliSwap to investigate
the assault.
The team at Hedera urged token holders to check their account
ID and Ethereum Virtual Machine (EVM) address balances on hashscan.io for their
own peace of mind, even though they swiftly removed proxies after learning of
the potential assault