Skip to main content
Sign in

Heco Bridge

avoid.net/heco-bridge→5/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2oYvBy…WWA9

Summary

Heco Bridge was the official cross-chain bridge connecting the HECO Chain (HTX Eco Chain) to Ethereum, operated by HTX (formerly Huobi) and associated with Justin Sun. On November 22, 2023, the bridge operator's private key was compromised, resulting in the theft of approximately $86.6 million in crypto assets; combined with a simultaneous HTX hot wallet breach, total losses reached approximately $99 million. Blockchain analytics firm Elliptic attributed the attack to North Korea's Lazarus Group, which subsequently laundered over $100 million of the proceeds through Tornado Cash. The HECO Network was permanently shut down on January 15, 2025.

Connected Entities

1 entities
Organizations
□Heco Bridge
Relationships
    Have evidence about Heco Bridge?

    Timeline(12 events)

    21 December 2020

    HECO Chain (Huobi Eco Chain) officially launches with a $200 million ecosystem fund; Heco Bridge goes live enabling cross-chain transfers between HECO and Ethereum.

    June 2021

    HECO Chain TVL peaks at approximately $3 billion.

    10 November 2023

    Poloniex, a Justin Sun-affiliated exchange, is hacked for approximately $120 million in a suspected private key compromise attributed to Lazarus Group.

    22 November 2023

    Heco Bridge operator private key is compromised; approximately $86.6 million in USDT, ETH, HBTC, SHIB, and other tokens drained to attacker address 0xfc146d1caf6ba1d1ce6dcb5b35dcbf895f50b0c4. Simultaneously, HTX hot wallets lose approximately $12.5 million.

    22 November 2023

    Justin Sun confirms the exploit on social media, pledges full compensation for HTX hot wallet losses, and offers a 5% white-hat bounty to the attacker.

    22 November 2023

    CertiK, Hacken, and ImmuneBytes publish post-mortem analyses attributing the attack to a private key compromise of the bridge operator account.

    23 November 2023

    CNBC reports combined HTX/HECO losses have reached approximately $115 million; services remain suspended.

    13 March 2024

    Stolen funds begin moving for the first time since the November 2023 attack; Lazarus Group routes ETH through Tornado Cash mixer with over 40 transactions in the first two days.

    14 March 2024

    Elliptic publishes analysis attributing the Heco Bridge and HTX hack to North Korea's Lazarus Group; reports over $100 million laundered through Tornado Cash.

    22 March 2024

    The Block and Crypto.news report that Heco Bridge exploiters have laundered over $145 million via Tornado Cash within approximately eight days.

    20 November 2024

    HTX announces scheduled permanent shutdown of the HECO Network effective January 15, 2025; users urged to redeem HRC20 assets before January 10, 2025.

    15 January 2025

    HECO Network officially ceases all operations. Heco Bridge is permanently defunct.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain16 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 16 of 18 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:36 AM

    last updated: 8/30/2026, 1:16:29 AM

    avoid.net — verified advice for a post-truth world