$8 Million Heist on TRON and Ethereum

Crypto exchange Coinsbuy suffered an $8 million loss in a coordinated attack across TRON and Ethereum on August 9. The attacker's plan was to drain funds from eight TRON wallets, which contained approximately 6.04 million USDT, in under an hour.

The assault began with a 5 USDT transaction before the hacker swept the TRON wallets clean of their stablecoin holdings. On Ethereum, three wallets were simultaneously emptied of 1.89 million USDT and 77 ETH, which was then swapped to ETH via 1inch through a wallet created on the same day.

The two blockchain chains were linked through cross-chain swapper Bridgers, whose Ethereum payout contract sent funds directly into the Ethereum swap wallet, connecting what appeared to be separate operations into a single incident. The attacker routed around 79% of the stolen funds through instant exchange FixedFloat using roughly 50 single-use addresses.

ChangeNOW froze a six-figure sum after being contacted by Specter Investigations, and around $542,000 in ETH remains unmoved across five addresses. Coinsbuy refilled the drained wallets to within 0.05% of their pre-attack balances within 24 hours, suggesting that private keys were not compromised.