The cryptocurrency exchange BigONE suffered a third-party supply chain attack this Wednesday, with official confirmation of losses amounting to $27 million. The attackers compromised BigONE's server logic through a supply chain intrusion, allowing them to extract funds.

The blockchain security platform SlowMist was the first to disclose the incident, stating that BigONE's production network was breached: "The server operating logic related to accounts and risk control was modified, enabling the attackers to extract funds." SlowMist pointed out in a post on the X platform.

Subsequently, BigONE confirmed the attack and assured users that all private keys remain secure and user assets were unaffected. Additionally, BigONE stated that it would bear all losses.

"All user assets are safe, and BigONE will fully cover this loss. Trading and deposits will resume shortly, and withdrawals will be opened after upgrading security measures," BigONE stated in the announcement.

BigONE also revealed that it has been closely collaborating with the SlowMist team to track the hacker's addresses and monitor the flow of funds.

Production Network as the Main Target

According to analyses from several security firms, the attackers successfully infiltrated BigONE's production infrastructure through the supply chain entry point.

As a result, systems related to risk control logic and account operations were tampered with, allowing the attackers to transfer funds, totaling over $27 million.

Data from CertiK Alert indicates that the attackers extracted approximately $4 million in Ethereum (ETH) and several other tokens.

Another security firm noted: "The attackers have begun converting the funds into TRX, BTC, ETH, and SOL."
Lookonchain data shows that the hackers quickly split and converted assets, transferring across multiple addresses:

• 120 Bitcoin, worth approximately $14.15 million;

• 23.316 million TRON (TRX) tokens, worth approximately $7.01 million;

• 1,272 Ethereum (ETH), worth approximately $4 million;

• 2,625 Solana (SOL), worth approximately $428,000.

Initiating Internal Security Reserves to Address Compensation

The BigONE team stated that the platform has activated internal security reserves to address the losses and compensation issues. This reserve includes mainstream assets such as BTC, ETH, USDT, SOL, and XIN.

"For other affected mainstream and non-mainstream tokens, we are actively raising external liquidity through lending mechanisms to restore platform wallet functionality as soon as possible," BigONE added.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。