KyberSwap Exploiter Distributes $50M to Largest HXA Token Holders

Last Updated:
KyberSwap Exploiter Distributes $50M to Largest HXA Token Holders
  • Cyvers disclosed an abnormal $50 million transaction linked to the exploited KyberSwap platform.
  • The exploiter disperses the funds to the largest holders of HXA tokens.
  • Following Cyvers’s update, exchanges Gate.io and MEXC suspended the withdrawal and deposit of HXA tokens.

In a recent communication, the prominent blockchain security firm Cyvers reported a concerning development related to the recently exploited platform KyberSwap, renowned for facilitating crypto assets exchange without intermediaries.

According to the update, Cyvers’ system has identified an “abnormal transaction” linked to the bad actors that exploited the Kyber Network. Specifically, the Cyvers team disclosed that the address associated with the Kyber Network exploiter received $50 million worth of HXA tokens from an Ethereum address using an unusual function. 

Moreover, Cyvers highlighted that the funds were subsequently distributed to various externally owned accounts (EOAs), with these EOAs identified as the largest holders of the HXA tokens.

Notably, KyberSwap was one of the crypto platforms that suffered from the high-profile security exploits that rocked the month of November, losing multi-million dollars.

Meanwhile, the security firm underscored that HXA, the native utility token of the Herencia Artifex NFT project, utilizes Thirdweb libraries in its smart contract implementation. Cyvers suspects that the KyberSwap exploit may be linked to a vulnerability in the Multicall function.  The security firm invites interested parties to reach out for additional information for further investigation into the matter.

In a follow-up post on X, Cyvers disclosed that withdrawals and deposits of HXA tokens have been suspended on both Gate.io and MEXC exchanges. While it comes following the detected abnormal transaction, it is unclear whether the deposit and withdrawal suspicion were in response to the security concerns arising from the exploited funds. 

Additionally, Cyvers mentioned that the HXA coin website, normally accessible at hxacoin.io, is currently unavailable, which remains so at the time of reporting.

Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.