XLink, a Bitcoin blockchain bridge, is set to resume operations after shutting down on May 15 due to a $10 million hack. The breach involved XLink’s Ethereum and BNB Smart Chain (BSC) endpoints. The incident was disclosed by the XLink team early on May 15.
The hacker used a phishing scheme to steal private keys, allowing them to control the BSC and Ethereum endpoints and withdraw $4.3 million.
A white-hat hacker recovered the stolen assets. Despite the recovery on BSC, around $5 million, mainly in LunarCrush tokens, is still locked on the Ethereum blockchain. The LunarCrush team is actively working with XLink to secure these funds, with the majority already recovered or secured. About $500,000 in residual crypto funds are still locked on Ethereum.
In response to the hack, XLink quickly suspended all bridge operations to conduct a thorough investigation. This investigation was carried out with the assistance of their security partners, including Ancilia, and liaisons from the Binance team.
XLink has advised users who interacted with compromised contracts to revoke any approved spending limits, providing detailed instructions and links for ETH and BSC users to mitigate further risks.
Also Read: Solana DeFi Platform Pump. Fun Suffers $2M Exploit
