defirisk.co
rubric v1.7.0

HECO Bridge (Huobi ECO Chain Ethereum Bridge): Compromised Bridge Operator Account (Private Key / Off-chain)

HECO Bridge lost $86.6M when a compromised operator account began draining the bridge contract — the third major hack tied to Justin Sun entities in 12 days, while global attention was focused on Binance's legal settlement.

Occurred 2023-11-22 Loss $87M Status closed

Summary #

HECO Bridge (Huobi ECO Chain Ethereum Bridge) suffered a Cross-Chain Bridge on 2023-11-22, resulting in a loss of approximately $87M.

What happened #

HECO Bridge lost $86.6M when a compromised operator account began draining the bridge contract — the third major hack tied to Justin Sun entities in 12 days, while global attention was focused on Binance's legal settlement.

Linked factors #

  • RD-F-007 — related : Bug bounty absent — baseline integrity gap [via dashboard_risk_factors/Bug bounty: Unknown]
  • RD-F-101 — illustrative : Large governance proposal queued — RT signal would have fired [via realtime_signals/Governance/admin action (Y/N): Y — operator account action was the enabling event]