A centralized exchange, lost approximately $14M across Bitcoin, Ethereum, Arbitrum, and BNB.

Yesterday,
@_WOO_X
,
a centralized exchange, lost approximately $14M across Bitcoin, Ethereum, Arbitrum, and BNB.

The incident was identified as a targeted phishing attack that compromised a team member’s device, giving the exploiter limited access to the development environment and enabling unauthorized withdrawals from 9 user accounts.

As per WOO X, all affected users will be fully reimbursed, and they have published the exploiter addresses and are offering a 10% bounty for the return of remaining funds.

Images: Tracer visuals of unauthorized flows on ETH/Arbitrum and BTC.