$5M Hedera Hack Funds Routed to Ethereum

- Attacker drains $5 million from Hedera, moving assets through LayerZero bridge to Ethereum - Exploit exposes transparency and governance gaps, raising concerns for enterprise users On July 11, 2026, CoinDesk reported that more than $5 million was stolen from the Hedera network in a sophisticated exploit. According to CoinDesk on July 11, 2026, the attacker transferred the funds to Ethereum via the LayerZero bridge and converted Wrapped Bitcoin (WBTC) to Ether (ETH), while onchain researchers Specter and PeckShieldAlert tracked the movement and confirmed that the attacker funneled the assets through Tornado Cash. The destination wallet on Ethereum currently holds approximately 2,360 ETH (about $4.25 million) and 15.58 WBTC (roughly $1 million). The incident highlights auditing and transparency weaknesses connected to Hedera’s unique hashgraph architecture, and it has drawn criticism from blockchain analysts. On July 11, 2026, blockchain investigator ZachXBT wrote on X (formerly Twitter), “Hedera is basically a privacy chain because its block explorer is so bad,” and his comments underscore how difficult it is for analysts to monitor transactions in real time. This exploit therefore deepens concerns for Hedera’s corporate partners, including McLaren Racing and Accenture, who rely on the network’s security and governance, and it raises further questions for organizations that consider Hedera as a base for critical infrastructure. Following news of the attack, Hedera’s HBAR token declined about 4% over 24 hours, and its market capitalization sits near $2.98 billion, according to CoinMarketCap. As of 15:09 UTC on July 11, HBAR trades at $0.069, while official comment from Hedera remains pending and industry observers await a detailed post-mortem.