- A compromised private key drained $4.3M in tokens, converted to ETH, then partially bridged to Bitcoin.
- IOTX fell 8% in 24 hours as the team raced to trace funds and contain the breach.
- Experts warn crypto hacks often cause lasting trust and liquidity issues despite quick technical fixes.
A sudden security incident has rattled the IoTeX ecosystem, forcing the decentralized identity protocol to act swiftly. On Saturday, the project confirmed unusual activity in one of its token safes after onchain analysts flagged potential compromise.
The team immediately stated it was “fully engaged, working around the clock to assess and contain the situation.” Early estimates suggest losses are lower than circulating rumors. Moreover, the team coordinated with major exchanges and security partners to trace and freeze funds linked to the attacker.
Following the incident, IoTeX’s native token (IOTX) dropped sharply, sliding over 8% in 24 hours to approximately $0.0049, according to CoinMarketCap. Analyst Specter revealed that a private key linked to the safe may have been compromised.
Consequently, the wallet lost several tokens, including USDC, USDT, IOTX, and wrapped Bitcoin (WBTC), with total estimated losses around $4.3 million. Additionally, the stolen funds were converted into Ether (ETH), and roughly 45 ETH were bridged to Bitcoin.
Rapid Asset Movements Raise Recovery Challenges
Specter also published addresses connected to the suspected attacker. Transaction records showed fast movements through decentralized exchanges and token swaps. These actions suggest a deliberate attempt to convert and move assets across chains quickly, complicating recovery efforts. Besides financial damage, such breaches risk shaking user confidence. Hence, timely response and communication are critical for damage control.
Experts note that most crypto projects struggle to recover from hacks. Immunefi CEO Mitchell Amador emphasized that teams often lack preparation, causing delays and poor decisions during crucial early hours.
Moreover, Kerberus CEO Alex Katz added that serious exploits trigger user withdrawals, declining liquidity, and long-term reputational damage. Consequently, even after technical fixes, the effects can linger, making recovery a steep challenge.



