Decentralized identity protocol IoTeX faced a sudden security incident on Saturday after onchain analysts flagged unusual activity in one of its token safes. The project confirmed the breach and stated it was “fully engaged, working around the clock to assess and contain the situation.” Early estimates suggest losses are lower than circulating rumors.
Compromised Private Key Drains $4.3M in Tokens
Analyst Specter revealed that a private key linked to the safe may have been compromised. The attacker drained multiple tokens including USDC, USDT, IOTX, and wrapped Bitcoin (WBTC), with total estimated losses of $4.3 million. The stolen funds were quickly converted into Ether (ETH), and approximately 45 ETH were bridged to Bitcoin. Transaction records show rapid movements through decentralized exchanges and token swaps, indicating a deliberate attempt to cross-chain and obscure the trail, complicating recovery efforts.
The IoTeX team immediately coordinated with major exchanges and security partners to trace and freeze funds linked to the attacker. Suspect addresses published by Specter were also shared with the community.
IOTX Slumps 8% in 24 Hours
According to CoinMarketCap, IoTeX's native token IOTX dropped sharply, sliding over 8% in 24 hours to approximately $0.0049. The price decline reflects market jitters over the security lapse despite the team’s swift response.
Experts Warn of Lingering Impact Beyond Technical Fixes
Immunefi CEO Mitchell Amador noted that most crypto projects are ill-prepared for hacks, leading to delays and poor decisions during the crucial early hours. Kerberus CEO Alex Katz added that serious exploits often trigger user withdrawals, declining liquidity, and long-term reputational damage. Even after technical fixes, the effects can linger, making full recovery a steep challenge.
The IoTeX team continues to trace fund movements and assess the overall impact. The incident underscores the need for stronger private key management, multi-signature verification, and real-time onchain monitoring for decentralized projects.