How Did the Attack Happen?

According to blockchain data, the breach began when the externally owned account (EOA) controlling the “TransferValidatorWithPayload” contract was compromised. Once the attacker gained access to this private key, they obtained full control over the TokenSafe and MinterPool contracts, effectively seizing ownership-level authority within the system.

With these elevated permissions, the attacker abused mint and transfer functions to extract significant amounts of assets in a short period of time. Experts emphasized that this was not a complex smart contract exploit but rather a direct compromise of ownership and private key security. The stolen funds were largely converted into Ethereum (ETH) and later bridged to the Bitcoin network via THORChain. Analysts noted that this method—bridging across multiple networks—is commonly used to obscure fund tracking and complicate forensic analysis.

On-chain reports indicate that multiple digital assets were taken, including:

• 2,835 UNI
• 45,825 BUSD
• 85 million IOTX
• 71 PAXG
• 20,158 DAI
• 11 WBTC
• 635 WETH
• 36 million USDC
• 14 million USDT

In addition, the attacker reportedly minted approximately $4 million worth of CIOTX tokens via MinterPool. The total estimated loss exceeds $8 million.

Official Statement from IoTeX

Following the widespread circulation of the news, the IoTeX team released a formal statement confirming that the breach had been contained. The team suggested that some figures circulating online may have been exaggerated and that the actual realized loss could be lower.

They also confirmed that major cryptocurrency exchanges were contacted to help track and potentially freeze the stolen funds. Users were advised to rely only on official communication channels and disregard unverified information.

According to analysts, there was no inherent flaw in the protocol’s core smart contracts. However, the compromise of a single private key enabled a cascading system-wide impact. The loss of ownership authority allowed the attacker to manipulate minting and transfer functions, once again highlighting the critical importance of key management and security in DeFi and bridge infrastructures.

Evaluation

The $8 million hack within the IoTeX ecosystem underscores the fundamental importance of private key security in crypto infrastructure. Even without a smart contract vulnerability, the compromise of one privileged key led to significant financial damage. Moving forward, coordination between the IoTeX team and major exchanges will be crucial in tracking the stolen funds and exploring potential recovery options. The incident serves as another reminder that operational security especially around ownership keys remains one of the most critical layers in decentralized finance systems.

You can freely share your thoughts and comments about the topic in the comment section. Additionally, please don’t forget to follow us on our Telegram, YouTube and Twitter channels for the latest news and updates instantly.

The post Major Hack in This Altcoin: Million-Dollar Loss! appeared first on Coin Engineer.

Leveraging Bitcoin’s Layer-2 for Real-World Assets

The partnership focuses on utilizing Bitcoin’s Layer-2 capabilities, particularly through Elastos’ approach. This will enhance the functionality and accessibility of real-world assets (RWA) such as buildings, equipment, and other capital-intensive assets.

The collaboration plans to achieve this by:

Integrating RWAs with blockchain technology

Utilizing Internet of Things (IoT) devices to collect and manage data

This will create a secure, efficient, and transparent ecosystem for managing and monetizing physical infrastructure.

Direct Integration with “Layer 2” Bitcoin

A key aspect of the partnership is the direct connection with “Layer 2” Bitcoin. IoTeX co-founder and CEO, Raullen Chai, emphasizes the significance of this development:

“This is an important milestone…direct integration with ‘Layer 2’ Bitcoin means that agreements can be embedded and reconciled directly in the World’s most popular and trusted digital currency. This is essential as DePINs become more mainstream.”

This integration enables secure and transparent management of agreements and transactions within the physical infrastructure space. Agreements can be directly embedded and reconciled on the Bitcoin blockchain itself.

Elastos’ BeL2’s BTC Oracle Makes it Possible

Elastos’ BeL2’s BTC Oracle facilitates this integration. It allows secure and efficient communication between Bitcoin and EVM blockchains through zero-knowledge proofs (ZKPs). This lays the groundwork for complex decentralized applications (dApps) to be built directly on Bitcoin Layer 2.

Bridging the Gap Between Digital and Physical Worlds

IoTeX’s modular infrastructure platform plays a crucial role by connecting smart devices and real-world data to blockchains. Additionally, their W3bstream middleware solution brings real-world data on-chain.

This capability ensures data integrity, speed, and scalability when integrating IoT devices with blockchain technology.

Elastos and IoTeX: Ushering in Web3’s “Next Frontier”

Jonathan Hargreaves, Elastos’ Global Head of Business Development & ESG, views this partnership as Web3’s “next frontier.” By reducing intermediaries and increasing transparency and privacy in managing physical assets, Elastos and IoTeX are bridging the gap between the digital and physical worlds, all powered by the security and trust of Bitcoin.

The post Introducing Bitcoin to Real-World Infrastructure with New Layer-2 DePIN Partnership appeared first on Coin Engineer.